HOW I USED O3 TO FIND CVE-2025-37899, A REMOTE ZERODAY VULNERABILITY IN THE LINUX KERNEL'S SMB IMPLEMENTATION

Summary from the TLDR AI newsletter

This post explains how a security researcher discovered a zeroday vulnerability in the Linux kernel using OpenAI's o3 model. The researcher used the o3 API without any scaffolding, agentic frameworks, or tools. Large language models have made a leap forward in their ability to reason about code. People working in vulnerability research should start paying close attention as the technology can make them significantly more efficient and effective.