KERNEL BUGS HIDE FOR 2 YEARS ON AVERAGE. SOME HIDE FOR 20

Summary from the TLDR Dev newsletter

An analysis of over 125 thousand Linux kernel bugs over 20 years revealed an average bug lifetime of 2.1 years, with some, like race conditions, hiding for over five years before discovery. While newer bugs are being found faster due to improved tooling, a backlog of ancient bugs still exists. To address this, a new tool called VulnBERT integrates neural pattern recognition with 51 handcrafted code features to successfully predict bug-introducing commits with 92.2% recall.