Ginux Rust Kernel Receives Security Fixes in 10 Hours While Linux Patch Takes 69 Days to Reach Mainline
A researcher identified multiple vulnerabilities in both the experimental Ginux Rust-based kernel and the upstream Linux kernel, revealing stark differences in development velocity. In Ginux, 15 issues were reported via GitHub, with the first three fixes merged into main within 10 hours and a critical TLS RNG flaw resolved in 12 hours. The Linux kernel patch for Android Binder required 69 days to reach Linus Torvalds' tree after initial submission, despite early review within 11 days. Ginux, created by Rocky Linux founder Gregory Kurtzer, uses AI agents for rapid patching while Linux follows traditional maintainer and release-cycle processes. The researcher used multiple AI models for threat modeling and adversarial verification before submitting PoCs reproduced in QEMU. The findings highlight how agent-driven development can accelerate security response compared to established kernel workflows.
HabrNov 2, 2026Translated from Russian