{ "id": "AIBD-0236", "title": "OpenAI o3 finds CVE-2025–37899, a remote use-after-free in the Linux kernel's ksmbd; patched in all maintained branches", "summary": "Sean Heelan, benchmarking o3 on ksmbd with no scaffolding, had the model surface an unknown use-after-free in the SMB logoff handler; the kernel CNA published CVE-2025–37899 on 20 May 2025.", "date_observed": "2025-05-20", "date_basis": "unassessed", "date_precision": "unassessed", "benefit_status": null, "source_collection": null, "source_entry": null, "account": "Heelan's write-up followed on 22 May 2025. Heelan is an independent vulnerability researcher auditing ksmbd (the Linux kernel's in-kernel SMB3 server). He used a known bug (CVE-2025–37778) to benchmark OpenAI's o3 via the plain application programming interface (API), with no scaffolding, agents or tools. Given about 12,000 lines covering all SMB command handlers, o3 reported a previously unknown use-after-free in the handler for the SMB “logoff” command. sess->user can be freed while another connection bound to the same session still uses it. The Linux kernel CNA's record describes the fix (“ksmbd: fix use-after-free in session logoff”) with commits in five stable branches. Linuxiac reports the upstream response was fast and patches were merged for every maintained branch. Heelan calls it, to his knowledge, the first public case of a large language model (LLM) finding a vulnerability of that nature.", "category": "benefit created", "unexpected": false, "purpose": "General-purpose reasoning model used by the researcher to audit kernel source code for vulnerabilities.", "system": "OpenAI o3", "model_version": "o3", "developer": "OpenAI", "deployer": "Sean Heelan (independent researcher)", "location": null, "domain": "Cybersecurity / vulnerability research", "segment": "Technology", "benefit_type": "Reduced Risk", "taxonomy_note": null, "registry_ids": {}, "ratings": [ { "group": "societal", "depth": 2, "reason": "A remotely reachable kernel memory-safety bug was fixed across maintained branches before any reported exploitation. Exposure of ksmbd users is not quantified." }, { "group": "organizational", "depth": 1, "reason": "The kernel project received a report with a fix merged quickly, per Linuxiac." } ], "ai_role": { "status": "assessed", "statement": "The model produced the finding unprompted during a benchmark. Heelan selected the code, validated the report and handled disclosure. He notes the model also produced false positives in other runs. The account is the independent deployer's own, corroborated by the CVE record and third-party coverage, not by OpenAI." }, "evidence": [ { "kind": "report", "citation": "Sean Heelan, personal blog, 22 May 2025", "title": "How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation", "url": "https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/", "date": "2025-05-22", "written_by": "deployer", "quote": "I found the vulnerability with nothing more complicated than the o3 API – no scaffolding, no agentic frameworks, no tool use." }, { "kind": "registry label", "citation": "CVE Program record CVE-2025-37899 (CNA: Linux), published 20 May 2025", "title": "CVE-2025-37899", "url": "https://www.cve.org/CVERecord?id=CVE-2025-37899", "date": "2025-05-20", "written_by": "independent", "quote": "The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the session being free'd." }, { "kind": "news report", "citation": "Bobby Borisov, Linuxiac, 29 May 2025", "title": "ChatGPT’s o3 Model Found Remote Zeroday in Linux Kernel Code", "url": "https://linuxiac.com/chatgpt-o3-model-found-remote-zeroday-in-linux-kernel-code/", "date": "2025-05-29", "written_by": "independent", "quote": "Upstream response was really fast, and the patches merged for every still-maintained kernel branch." } ], "replication": { "produced_by": [ "A code slice under roughly 10k-12k lines chosen by an expert", "Repeated model runs with reports triaged by a human", "A maintainer workflow that accepts and patches reports quickly" ], "must_hold": [ "Expert curation of context and validation of candidate bugs", "Tolerance for false positives across runs" ], "echoes": [] }, "paired_incident": null, "headline": "OpenAI o3 finds CVE-2025–37899, a use-after-free in ksmbd", "metric": null, "comparator": { "against": "Claude Sonnet 3.7 and Claude Sonnet 3.5 on the same 100-run benchmark (the known ksmbd Kerberos bug)", "before": "Claude Sonnet 3.7 finds it 3 out of 100 runs and Claude Sonnet 3.5 does not find it in 100 runs", "after": "o3 finds the kerberos authentication vulnerability in the benchmark in 8 of the 100 runs", "basis": "measured", "quote": "o3 finds the kerberos authentication vulnerability in the benchmark in 8 of the 100 runs. In another 66 of the runs o3 concludes there is no bug present in the code (false negatives), and the remaining 28 reports are false positives. For comparison, Claude Sonnet 3.7 finds it 3 out of 100 runs and Claude Sonnet 3.5 does not find it in 100 runs.", "url": "https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/" }, "later": { "status": "persisted", "date": "2025-05-29", "note": "Linuxiac reported that the upstream fix was merged quickly into every maintained kernel branch, and the CVE record lists five stable-branch commits.", "quote": "Upstream response was really fast, and the patches merged for every still-maintained kernel branch.", "url": "https://linuxiac.com/chatgpt-o3-model-found-remote-zeroday-in-linux-kernel-code/" }, "value": null, "developer_country": "United States", "deployer_country": null, "unrated_because": null, "brief_notes": null, "brief": null, "revisions": [ { "date": "2026-10-20", "change": "Record drafted from the cited sources.", "source": null, "editor": "AIBD" }, { "date": "2026-10-21", "change": "Added what the benefit is measured against, what happened since from the cited sources.", "source": "https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/; https://linuxiac.com/chatgpt-o3-model-found-remote-zeroday-in-linux-kernel-code/", "editor": "AIBD" }, { "date": "2026-10-21", "change": "Benefit type set to Reduced Risk under Trustible's full taxonomy of 23 types; it was Improved Knowledge Discovery among the six first used.", "source": "https://trustible.ai/post/a-framework-for-measuring-the-benefits-of-ai/", "editor": "AIBD" }, { "date": "2026-10-21", "change": "Country of the developer added from the organization's own site or a registry.", "source": "https://en.wikipedia.org/wiki/OpenAI", "editor": "AIBD" }, { "date": "2026-10-21", "change": "Prose pass: a rating reason, account, the system's part rewritten in shorter sentences with abbreviations expanded; facts, figures and quotations unchanged.", "source": null, "editor": "AIBD" } ], "confidence": "reported", "shade": "medium", "claim_status": "Independently reported", "claim_basis": "Sources: one independent news report, a registry entry and the deployer's report. The cited evidence includes no independent study or report and no finding by a regulator or court.", "profile": { "case_id": "AIBD-0236", "catalog_version": "1.0.0", "source_fingerprint": "9cb79554fbd39e1a6ca90976eab27ce993eb349e7861e95de4647ab3e6f9a36c", "collection_refs": [ { "collection_id": "aibd", "version": "snapshot-8bf7cfec9cb185aa" }, { "collection_id": "aibd", "version": "2026-10-25" }, { "collection_id": "chanticleer", "version": "2026-10-25" } ], "source_ids": [ "AIBD-0236-source-0001", "AIBD-0236-source-0002", "AIBD-0236-source-0003" ], "families": { "strategic assessments": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "record_ids": [] }, "evaluations": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "record_ids": [] }, "monetary observations": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "record_ids": [] }, "institutional decisions": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "record_ids": [] } }, "fields": { "actors[]": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "developer": "OpenAI", "deployer": "Sean Heelan (independent researcher)" } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "developer", "deployer" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "actors[].ownership_control": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "ai_contribution": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "ai_role": { "status": "assessed", "statement": "The model produced the finding unprompted during a benchmark. Heelan selected the code, validated the report and handled disclosure. He notes the model also produced false positives in other runs. The account is the independent deployer's own, corroborated by the CVE record and third-party coverage, not by OpenAI." } } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "ai_role" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "ai_relationship": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "category": "benefit created", "ai_role": { "status": "assessed", "statement": "The model produced the finding unprompted during a benchmark. Heelan selected the code, validated the report and handled disclosure. He notes the model also produced false positives in other runs. The account is the independent deployer's own, corroborated by the CVE record and third-party coverage, not by OpenAI." } } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "ai_role", "category" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "assessments[].alternatives": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "assessments[].assessor_date": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "assessments[].depth": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "ratings": [ { "group": "societal", "depth": 2, "reason": "A remotely reachable kernel memory-safety bug was fixed across maintained branches before any reported exploitation. Exposure of ksmbd users is not quantified." }, { "group": "organizational", "depth": 1, "reason": "The kernel project received a report with a fix merged quickly, per Linuxiac." } ] } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "ratings" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "assessments[].display_confidence": { "state": "value_present", "value": { "kind": "structured", "data": { "confidence": "medium", "evidence_word": "reported", "claim_status": "Independently reported", "basis": "Sources: one independent news report, a registry entry and the deployer's report. The cited evidence includes no independent study or report and no finding by a regulator or court.", "interpretation": "Existing display rule preserved; the richer outcome-specific confidence question still needs review." } }, "provenance": { "kind": "curatorial", "basis": "Derived from the existing case display properties; not a new evidentiary judgment.", "record_fields": [], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "assessments[].rationale": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "ratings": [ { "group": "societal", "depth": 2, "reason": "A remotely reachable kernel memory-safety bug was fixed across maintained branches before any reported exploitation. Exposure of ksmbd users is not quantified." }, { "group": "organizational", "depth": 1, "reason": "The kernel project received a report with a fix merged quickly, per Linuxiac." } ] } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "ratings" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "assessments[].rubric_version": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "assessments[].status_basis": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "assessments[].target": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "ratings": [ { "group": "societal", "depth": 2, "reason": "A remotely reachable kernel memory-safety bug was fixed across maintained branches before any reported exploitation. Exposure of ksmbd users is not quantified." }, { "group": "organizational", "depth": 1, "reason": "The kernel project received a report with a fix merged quickly, per Linuxiac." } ] } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "ratings" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "availability": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "brief": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "case_kind": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "case_links[]": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "claims[].evidence_links": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "claims[].evidence_strength": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "claims[].missingness": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "claims[].proposition": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "cross_border_flows[]": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "decisions[].action_outcome": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "institutional decisions" }, "decisions[].grounds": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "institutional decisions" }, "decisions[].institution_task": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "institutional decisions" }, "decisions[].success_criterion": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "institutional decisions" }, "deployment_stage": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "economics[].amount": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "monetary observations" }, "economics[].costs[]": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "monetary observations" }, "economics[].counterfactual": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "monetary observations" }, "economics[].currency_price_basis": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "monetary observations" }, "economics[].gross_net": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "monetary observations" }, "economics[].measure_type": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "monetary observations" }, "economics[].period_unit": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "monetary observations" }, "economics[].realization": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "monetary observations" }, "economics[].recipient_payer": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "monetary observations" }, "economics[].return_payback": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "monetary observations" }, "economics[].valuation_method": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "monetary observations" }, "evaluations[].ai_uplift": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "evaluations" }, "evaluations[].comparator": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "evaluations" }, "evaluations[].design": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "evaluations" }, "evaluations[].effect": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "evaluations" }, "evaluations[].exposure": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "evaluations" }, "evaluations[].id": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "evaluations" }, "evaluations[].measurement_method": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "evaluations" }, "evaluations[].metric": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "evaluations" }, "evaluations[].reproduction_materials": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "evaluations" }, "evaluations[].setting_sample": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "evaluations" }, "evaluations[].uncertainty_limitations": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "evaluations" }, "external_references[]": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "follow_up[]": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "later": { "status": "persisted", "date": "2025-05-29", "note": "Linuxiac reported that the upstream fix was merged quickly into every maintained kernel branch, and the CVE record lists five stable-branch commits.", "quote": "Upstream response was really fast, and the patches merged for every still-maintained kernel branch.", "url": "https://linuxiac.com/chatgpt-o3-model-found-remote-zeroday-in-linux-kernel-code/" } } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "later" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "human_oversight": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "id": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "id": "AIBD-0236" } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "id" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "infrastructure_dependencies[]": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "outcomes[].beneficiaries": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "outcomes[].beneficiary_count": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "outcomes[].benefit_type": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "benefit_type": "Reduced Risk" } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "benefit_type" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "outcomes[].claim": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "account": "Heelan's write-up followed on 22 May 2025. Heelan is an independent vulnerability researcher auditing ksmbd (the Linux kernel's in-kernel SMB3 server). He used a known bug (CVE-2025–37778) to benchmark OpenAI's o3 via the plain application programming interface (API), with no scaffolding, agents or tools. Given about 12,000 lines covering all SMB command handlers, o3 reported a previously unknown use-after-free in the handler for the SMB “logoff” command. sess->user can be freed while another connection bound to the same session still uses it. The Linux kernel CNA's record describes the fix (“ksmbd: fix use-after-free in session logoff”) with commits in five stable branches. Linuxiac reports the upstream response was fast and patches were merged for every maintained branch. Heelan calls it, to his knowledge, the first public case of a large language model (LLM) finding a vulnerability of that nature.", "benefit_type": "Reduced Risk" } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "account", "benefit_type" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "outcomes[].distribution": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "outcomes[].duration": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "outcomes[].id": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "outcomes[].stakeholder_group": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "ratings": [ { "group": "societal", "depth": 2, "reason": "A remotely reachable kernel memory-safety bug was fixed across maintained branches before any reported exploitation. Exposure of ksmbd users is not quantified." }, { "group": "organizational", "depth": 1, "reason": "The kernel project received a report with a fix merged quickly, per Linuxiac." } ] } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "ratings" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "outcomes[].status": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "outcomes[].tradeoffs": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "outcomes[].unexpected": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "unexpected": false, "purpose": "General-purpose reasoning model used by the researcher to audit kernel source code for vulnerabilities." } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "unexpected", "purpose" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "places[]": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "developer_country": "United States" } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "developer_country" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "purpose": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "purpose": "General-purpose reasoning model used by the researcher to audit kernel source code for vulnerabilities." } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "purpose" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "record_dates": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "date_observed": "2025-05-20", "revisions": [ { "date": "2026-10-20", "change": "Record drafted from the cited sources.", "editor": "AIBD" }, { "date": "2026-10-21", "change": "Added what the benefit is measured against, what happened since from the cited sources.", "source": "https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/; https://linuxiac.com/chatgpt-o3-model-found-remote-zeroday-in-linux-kernel-code/", "editor": "AIBD" }, { "date": "2026-10-21", "change": "Benefit type set to Reduced Risk under Trustible's full taxonomy of 23 types; it was Improved Knowledge Discovery among the six first used.", "source": "https://trustible.ai/post/a-framework-for-measuring-the-benefits-of-ai/", "editor": "AIBD" }, { "date": "2026-10-21", "change": "Country of the developer added from the organization's own site or a registry.", "source": "https://en.wikipedia.org/wiki/OpenAI", "editor": "AIBD" }, { "date": "2026-10-21", "change": "Prose pass: a rating reason, account, the system's part rewritten in shorter sentences with abbreviations expanded; facts, figures and quotations unchanged.", "editor": "AIBD" } ] } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "date_observed", "revisions" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "replication.attempts[]": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "replication.conditions": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "replication": { "produced_by": [ "A code slice under roughly 10k-12k lines chosen by an expert", "Repeated model runs with reports triaged by a human", "A maintainer workflow that accepts and patches reports quickly" ], "must_hold": [ "Expert curation of context and validation of candidate bugs", "Tolerance for false positives across runs" ], "echoes": [] } } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "replication" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "revision_history[]": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "revisions": [ { "date": "2026-10-20", "change": "Record drafted from the cited sources.", "editor": "AIBD" }, { "date": "2026-10-21", "change": "Added what the benefit is measured against, what happened since from the cited sources.", "source": "https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/; https://linuxiac.com/chatgpt-o3-model-found-remote-zeroday-in-linux-kernel-code/", "editor": "AIBD" }, { "date": "2026-10-21", "change": "Benefit type set to Reduced Risk under Trustible's full taxonomy of 23 types; it was Improved Knowledge Discovery among the six first used.", "source": "https://trustible.ai/post/a-framework-for-measuring-the-benefits-of-ai/", "editor": "AIBD" }, { "date": "2026-10-21", "change": "Country of the developer added from the organization's own site or a registry.", "source": "https://en.wikipedia.org/wiki/OpenAI", "editor": "AIBD" }, { "date": "2026-10-21", "change": "Prose pass: a rating reason, account, the system's part rewritten in shorter sentences with abbreviations expanded; facts, figures and quotations unchanged.", "editor": "AIBD" } ] } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "revisions" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "sector": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "domain": "Cybersecurity / vulnerability research", "segment": "Technology" } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "domain", "segment" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "sources[].access_version": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "sources[].citation_locator": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "evidence": [ { "kind": "report", "citation": "Sean Heelan, personal blog, 22 May 2025", "title": "How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation", "url": "https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/", "date": "2025-05-22", "written_by": "deployer", "quote": "I found the vulnerability with nothing more complicated than the o3 API – no scaffolding, no agentic frameworks, no tool use." }, { "kind": "registry label", "citation": "CVE Program record CVE-2025-37899 (CNA: Linux), published 20 May 2025", "title": "CVE-2025-37899", "url": "https://www.cve.org/CVERecord?id=CVE-2025-37899", "date": "2025-05-20", "written_by": "independent", "quote": "The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the session being free'd." }, { "kind": "news report", "citation": "Bobby Borisov, Linuxiac, 29 May 2025", "title": "ChatGPT’s o3 Model Found Remote Zeroday in Linux Kernel Code", "url": "https://linuxiac.com/chatgpt-o3-model-found-remote-zeroday-in-linux-kernel-code/", "date": "2025-05-29", "written_by": "independent", "quote": "Upstream response was really fast, and the patches merged for every still-maintained kernel branch." } ] } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "evidence" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "sources[].id": { "state": "value_present", "value": { "kind": "identifiers", "identifiers": [ "AIBD-0236-source-0001", "AIBD-0236-source-0002", "AIBD-0236-source-0003" ], "role": "Existing evidence items, in their original order" }, "provenance": { "kind": "curatorial", "basis": "Stable within the fingerprinted record version; no source content or source review has been added.", "record_fields": [], "source_refs": [] }, "review_state": "record_mapped", "coverage": "complete" }, "sources[].language": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "sources[].relationship": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "evidence": [ { "kind": "report", "citation": "Sean Heelan, personal blog, 22 May 2025", "title": "How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation", "url": "https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/", "date": "2025-05-22", "written_by": "deployer", "quote": "I found the vulnerability with nothing more complicated than the o3 API – no scaffolding, no agentic frameworks, no tool use." }, { "kind": "registry label", "citation": "CVE Program record CVE-2025-37899 (CNA: Linux), published 20 May 2025", "title": "CVE-2025-37899", "url": "https://www.cve.org/CVERecord?id=CVE-2025-37899", "date": "2025-05-20", "written_by": "independent", "quote": "The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the session being free'd." }, { "kind": "news report", "citation": "Bobby Borisov, Linuxiac, 29 May 2025", "title": "ChatGPT’s o3 Model Found Remote Zeroday in Linux Kernel Code", "url": "https://linuxiac.com/chatgpt-o3-model-found-remote-zeroday-in-linux-kernel-code/", "date": "2025-05-29", "written_by": "independent", "quote": "Upstream response was really fast, and the patches merged for every still-maintained kernel branch." } ] } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "evidence" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "sources[].upstream_sources": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "strategic_assessments[]": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial", "family": "strategic assessments" }, "summary": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "summary": "Sean Heelan, benchmarking o3 on ksmbd with no scaffolding, had the model surface an unknown use-after-free in the SMB logoff handler; the kernel CNA published CVE-2025–37899 on 20 May 2025.", "account": "Heelan's write-up followed on 22 May 2025. Heelan is an independent vulnerability researcher auditing ksmbd (the Linux kernel's in-kernel SMB3 server). He used a known bug (CVE-2025–37778) to benchmark OpenAI's o3 via the plain application programming interface (API), with no scaffolding, agents or tools. Given about 12,000 lines covering all SMB command handlers, o3 reported a previously unknown use-after-free in the handler for the SMB “logoff” command. sess->user can be freed while another connection bound to the same session still uses it. The Linux kernel CNA's record describes the fix (“ksmbd: fix use-after-free in session logoff”) with commits in five stable branches. Linuxiac reports the upstream response was fast and patches were merged for every maintained branch. Heelan calls it, to his knowledge, the first public case of a large language model (LLM) finding a vulnerability of that nature." } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "summary", "account" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "systems[].autonomy_permissions": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "systems[].component_role": { "state": "value_present", "value": { "kind": "text", "text": "The model analyzed source code and identified a possible vulnerability for a researcher to verify." }, "provenance": { "kind": "legacy_record", "basis": "Restated the mechanical task already described in the existing system and AI-role fields. No new source review is claimed.", "record_fields": [ "system", "ai_role" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "systems[].deployment_configuration": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "systems[].inputs_outputs": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "systems[].model_name": { "state": "value_present", "value": { "kind": "text", "text": "o3." }, "provenance": { "kind": "legacy_record", "basis": "Separated the model, software, hardware, or operation already described in the existing record. No new source review is claimed.", "record_fields": [ "model_version", "system", "ai_role" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "systems[].model_version": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "model_version": "o3" } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "model_version" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial", "display": { "answer": "Exact release not established.", "editor_note": "" } }, "systems[].product_name": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "system": "OpenAI o3" } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "system" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "systems[].provider": { "state": "value_present", "value": { "kind": "structured", "data": { "application_developer": "OpenAI" } }, "provenance": { "kind": "legacy_record", "basis": "Mapped from the existing case description without a new external source review.", "record_fields": [ "developer" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "taxonomy_crosswalks[]": { "state": "not_assessed", "review_state": "not_assessed", "coverage": "partial" }, "title": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "title": "OpenAI o3 finds CVE-2025–37899, a remote use-after-free in the Linux kernel's ksmbd; patched in all maintained branches", "headline": "OpenAI o3 finds CVE-2025–37899, a use-after-free in ksmbd" } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "title", "headline" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" }, "version": { "state": "value_present", "value": { "kind": "identifiers", "identifiers": [ "9cb79554fbd39e1a6ca90976eab27ce993eb349e7861e95de4647ab3e6f9a36c" ], "role": "SHA-256 of normalized original case data" }, "provenance": { "kind": "curatorial", "basis": "Deterministic content version assigned by the local migration.", "record_fields": [], "source_refs": [] }, "review_state": "record_mapped", "coverage": "complete" }, "workflow": { "state": "value_present", "value": { "kind": "record_fields", "fields": { "account": "Heelan's write-up followed on 22 May 2025. Heelan is an independent vulnerability researcher auditing ksmbd (the Linux kernel's in-kernel SMB3 server). He used a known bug (CVE-2025–37778) to benchmark OpenAI's o3 via the plain application programming interface (API), with no scaffolding, agents or tools. Given about 12,000 lines covering all SMB command handlers, o3 reported a previously unknown use-after-free in the handler for the SMB “logoff” command. sess->user can be freed while another connection bound to the same session still uses it. The Linux kernel CNA's record describes the fix (“ksmbd: fix use-after-free in session logoff”) with commits in five stable branches. Linuxiac reports the upstream response was fast and patches were merged for every maintained branch. Heelan calls it, to his knowledge, the first public case of a large language model (LLM) finding a vulnerability of that nature.", "replication": { "produced_by": [ "A code slice under roughly 10k-12k lines chosen by an expert", "Repeated model runs with reports triaged by a human", "A maintainer workflow that accepts and patches reports quickly" ], "must_hold": [ "Expert curation of context and validation of candidate bugs", "Tolerance for false positives across runs" ], "echoes": [] } } }, "provenance": { "kind": "legacy_record", "basis": "Preserved from the existing AIBD record; external sources were not rechecked.", "record_fields": [ "account", "replication" ], "source_refs": [] }, "review_state": "record_mapped", "coverage": "partial" } }, "summary": { "total": 91, "addressed": 91, "known": 31, "reviewed": 0, "record_mapped": 31, "not_assessed": 60, "complete": false, "by_state": { "value_present": 31, "not_reported": 0, "unresolved": 0, "not_assessed": 60, "not_applicable": 0, "withheld": 0, "source_unavailable": 0 } } } }