由LLM生成的安全报告推动的内核代码移除

Hacker News Top 新闻

摘要

Linux内核维护者正在移除无人维护的网络和业余无线电子系统,以应对AI生成的大量安全报告对审核带宽造成的冲击。

暂无内容
查看原文
查看缓存全文

缓存时间: 2026/04/22 13:13

# 因 LLM 安全报告激增,内核代码被整体移除 来源:https://lwn.net/Articles/1068928/ \[Posted April 22, 2026 by corbet\] 社区正在推进多项“删代码”行动,主要针对网络子系统,以此应对大模型批量生成的安全漏洞报告。拟移除的内容包括: - ISA 与 PCMCIA 以太网驱动(https://lwn.net/ml/all/20260421-v7-0-0-net-next-driver-removal-v1-v1-0-69517c689d1f@lunn.ch) - 两款 PCI 驱动(https://lwn.net/ml/all/[email protected]) - AX.25 与业余无线电协议栈(https://lwn.net/ml/all/[email protected]) - ATM 协议及驱动(https://lwn.net/ml/all/[email protected]) - ISDN 子系统(https://lwn.net/ml/all/[email protected]) > 把业余无线电(AX.25、NET/ROM、ROSE)协议实现及相关 hamradio 设备驱动全部移出内核。这套协议历来是 bug/syzbot 的重灾区,既然没人站出来帮忙消化 AI 生成的海量报告,我们只能“连根拔起”保 sanity。 --- to post comments ### 标题有点歧义 Posted Apr 22, 2026 7:01 UTC (Wed) by **sneela** (subscriber, #180826) [Link](https://lwn.net/Articles/1068930/) 4 responses 标题读起来像是 LLM 报告“帮忙”删代码,其实是报告太多把人逼疯才删的。 ### 标题有点歧义 Posted Apr 22, 2026 8:19 UTC (Wed) by **taladar** (subscriber, #68407) [Link](https://lwn.net/Articles/1068944/) 3 responses 真正的问题是:大项目里大量无人维护的代码,靠“躺在内核里”假装有人管;要是独立成项目,早几年就暴露没人维护了。 ### 标题有点歧义 Posted Apr 22, 2026 9:42 UTC (Wed) by **aragilar** (subscriber, #122569) [Link](https://lwn.net/Articles/1068959/) 2 responses 真的都无人维护吗?看补丁主要是老硬件,平时只随内核基础设施改动而被动改几行。 https://lwn.net/ml/all/[email protected]/ 核心还是垃圾报告太多,干脆减少待审代码量,哪怕设备仍有人用。只是让这些人死守老内核也不是办法。 ### 标题有点歧义 Posted Apr 22, 2026 12:44 UTC (Wed) by **NAR** (subscriber, #1313) [Link](https://lwn.net/Articles/1068976/) 1 responses “让用老硬件的人死守老内核”——新内核还能在 1998 年的笔记本上跑吗?软件越来越吃资源,真在乎安全(谁闲得去 pwn 那机器?)前面加道防火墙就是了。 ### 标题有点歧义 Posted Apr 22, 2026 12:51 UTC (Wed) by **pizza** (subscriber, #46) [Link](https://lwn.net/Articles/1068978/) ### 宁要“假业余无线电”,也别没驱动 Posted Apr 22, 2026 7:12 UTC (Wed) by **Alterego** (guest, #55989) [Link](https://lwn.net/Articles/1068931/) 3 responses ### 宁要“假业余无线电”,也别没驱动 Posted Apr 22, 2026 7:27 UTC (Wed) by **Funcan** (guest, #44209) [Link](https://lwn.net/Articles/1068935/) 这不是 AI 命令我们删,而是 AI 快把系统“玩坏了”,两码事。 ### 业余无线电真需要内核驱动? Posted Apr 22, 2026 9:18 UTC (Wed) by **arnout** (subscriber, #94240) [Link](https://lwn.net/Articles/1068951/) ### 宁要“假业余无线电”,也别没驱动 Posted Apr 22, 2026 10:36 UTC (Wed) by **tao** (subscriber, #17563) [Link](https://lwn.net/Articles/1068964/) 你愿意维护、修 bug,代码自然能留。功能正常 ≠ 安全。发现问题就该修;没人修,又有用户空间方案,最安全的做法就是砍掉。 ### 既然能批量报 bug,就得批量补洞 Posted Apr 22, 2026 7:55 UTC (Wed) by **jafd** (subscriber, #129642) [Link](https://lwn.net/Articles/1068940/) 6 responses 我主张:LLM 报 bug 必须同时出补丁,否则一律无视。 ### 既然能批量报 bug,就得批量补洞 Posted Apr 22, 2026 8:11 UTC (Wed) by **mjg59** (subscriber, #23239) [Link](https://lwn.net/Articles/1068942/) 5 responses bug 的存在与有没有补丁无关。对开发者不公平,对依赖代码安全的用户更不公平。 ### 既然能批量报 bug,就得批量补洞 Posted Apr 22, 2026 8:37 UTC (Wed) by **ballombe** (subscriber, #9523) [Link](https://lwn.net/Articles/1068946/) 4 responses 把 HAM 无线电砍掉,并不会让任何人更安全。 ### 既然能批量报 bug,就得批量补洞 Posted Apr 22, 2026 8:43 UTC (Wed) by **taladar** (subscriber, #68407) [Link](https://lwn.net/Articles/1068947/) 3 responses ### 既然能批量报 bug,就得批量补洞 Posted Apr 22, 2026 9:31 UTC (Wed) by **darmengod** (subscriber, #130659) [Link](https://lwn.net/Articles/1068956/) 1 responses 我们靠移除 HAM 无线电支持,来提升 HAM 玩家的安全性——因为他们再也用不了无线电了。 ### 既然能批量报 bug,就得批量补洞 Posted Apr 22, 2026 9:59 UTC (Wed) by **farnz** (subscriber, #17727) [Link](https://lwn.net/Articles/1068960/) 删代码 ≠ 不能用无线电。CAT(串口)、声卡支持都在,direwolf、WSJT-X、AGWPE 等用户空间程序照样跑。 ### 既然能批量报 bug,就得批量补洞 Posted Apr 22, 2026 11:49 UTC (Wed) by **pizza** (subscriber, #46) [Link](https://lwn.net/Articles/1068973/) ### 给 ISA 卡驱动做安全审计,图啥? Posted Apr 22, 2026 7:56 UTC (Wed) by **darmengod** (subscriber, #130659) [Link](https://lwn.net/Articles/1068932/) 4 responses ### 给 ISA 卡驱动做安全审计,图啥? Posted Apr 22, 2026 8:22 UTC (Wed) by **taladar** (subscriber, #68407) [Link](https://lwn.net/Articles/1068945/) 2 responses 恰恰相反:天线谁都能发数据,处理这种输入的代码更应加固。 ### 给 ISA 卡驱动做安全审计,图啥? Posted Apr 22, 2026 9:25 UTC (Wed) by **farnz** (subscriber, #17727) [Link](https://lwn.net/Articles/1068949/) 1 responses 真正麻烦的是:即便机器没插 ham 硬件,协议模块也可能被自动加载,本地攻击者照样能利用其中的提权漏洞。 顺带一提,受影响的用户可以看下 direwolf(https://github.com/wb2osz/direwolf/blob/dev/doc/README.md),很多以前靠硬件 TNC 做的事,现在靠声卡就能在用户空间搞定。 ### 给 ISA 卡驱动做安全审计,图啥? Posted Apr 22, 2026 10:33 UTC (Wed) by **epa** (subscriber, #39769) [Link](https://lwn.net/Articles/1068962/) ### 给 ISA 卡驱动做安全审计,图啥? Posted Apr 22, 2026 11:39 UTC (Wed) by **pm215** (subscriber, #98099) [Link](https://lwn.net/Articles/1068970/) ### 重写 Rust 派 Posted Apr 22, 2026 8:08 UTC (Wed) by **hailfinger** (subscriber, #76962) [Link](https://lwn.net/Articles/1068939/) 2 responses ### 重写 Rust 派 Posted Apr 22, 2026 10:31 UTC (Wed) by **tao** (subscriber, #17563) [Link](https://lwn.net/Articles/1068961/) 1 responses ### 重写 Rust 派 Posted Apr 22, 2026 10:41 UTC (Wed) by **epa** (subscriber, #39769) [Link](https://lwn.net/Articles/1068965/) 思路是:就算没人维护,只要用安全 Rust 重写,内存腐败也祸及不到内核其他地方——最多把对应设备玩崩溃(如果你非要把 NFS 挂在 PCMCIA 网卡或业余电台上,那也算安全事件吧)。

相似文章

Linux安全邮件列表“几乎无法管理”

Hacker News Top

Linus Torvalds 表示 Linux 安全邮件列表“几乎完全无法管理”,原因是出现了大量由 AI 生成的重复错误报告,他将这种混乱称为“无意义的工作”。

AI扫描漏洞引发令人担忧的Linux安全趋势

Reddit r/ArtificialInteligence

AI工具正在加速发现并公开披露Linux内核漏洞,形成一种令人担忧的趋势:频繁出现权限提升漏洞,可能需要每周重启服务器。Linus Torvalds改变了Linux安全社区处理AI发现漏洞的方式,默认将其视为公开信息。

使用基于LLM的验证消除Linux网络栈中的缺陷

Lobsters Hottest

Basis 的研究人员利用 LLM 对 Linux 的 nftables 防火墙进行了正式验证,发现了自2022年以来所有版本中存在的两个关键漏洞,并生成了一个无这些漏洞的经过验证的实现。

看来,Linus Torvalds 与 AI 的关系颇为复杂。

Reddit r/singularity

Linus Torvalds 将 Linux Kernel 7.2 描述为“巨大”,因为 AI 工具现在能够以人类无法匹敌的速度审查内核代码,并以比以往任何开发周期更快的速度提出修复。尽管他此前曾批评过 AI 生成的补丁和错误报告质量低下,但他接受了这一新常态,并指出 Linux 并非反 AI 项目。