Linus Torvalds says AI tools are changing Linux kernel development and increasing the volume of bug reports, especially for security triage. Speaking at the Linux Foundation’s Open Source Summit North America, Torvalds describes a significant rise in kernel commits over the past six months, attributing part of the change to AI tools becoming good enough for more developers to use them. He says AI can also help in the long run by surfacing bugs that eventually get fixed, improving code quality.
However, Torvalds also reports “pain points” from how AI affects workflows. He cautions that when people submit low-effort, “drive-by” reports—often not answering follow-up questions—the review burden grows, particularly for small maintainers. He also says many reports are being directed to the Linux security mailing list even when they are not true security issues. Multiple outlets report Torvalds characterizing the security list as “almost entirely unmanageable” due to large duplication, with different users using similar tools and finding the same issues.
To cope, the Linux project applies triage and review processes, including using tools such as Sashiko to review patches, ask clarifying questions, and help filter duplicates. The project also updates documentation to address the uptick in bug and security reports related to AI-assisted discoveries.
