<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/ai-use-in-the-linux-kernel-microsoft-defender-on-linux-other-october-highlights-jddyncrth" -->

---
title: AI Use In The Linux Kernel, Microsoft Defender On Linux...
description: October's roundup highlights several Linux kernel vulnerabilities accidentally posted to the public mailing list instead of the private security list, with...
canonical: https://daily.dev/posts/ai-use-in-the-linux-kernel-microsoft-defender-on-linux-other-october-highlights-jddyncrth
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: AI Use In The Linux Kernel, Microsoft Defender On Linux & Other October Highlights | daily.dev
og:description: October's roundup highlights several Linux kernel vulnerabilities accidentally posted to the public mailing list instead of the private security list, with...
og:url: https://daily.dev/posts/ai-use-in-the-linux-kernel-microsoft-defender-on-linux-other-october-highlights-jddyncrth
og:image: https://api.daily.dev/og/posts/jddyNcrTh.png
og:image:alt: AI Use In The Linux Kernel, Microsoft Defender On Linux & Other October Highlights
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# AI Use In The Linux Kernel, Microsoft Defender On Linux & Other October Highlights

**[Phoronix](https://daily.dev/sources/phoronix)** · 11 min read · 0 upvotes · 0 comments

## Summary

October's roundup highlights several Linux kernel vulnerabilities accidentally posted to the public mailing list instead of the private security list, with CVSS scores as high as 9.0. Linus Torvalds used Claude Code to draft a fundamental kernel I/O improvement and separately talked up using AI to make patches more decipherable, with the AI noting more long-standing bugs in the process. Microsoft ported Microsoft Defender to the Linux desktop. Siemens shut down the open-source OpenRadioss project. A change merged for Linux 7.4 shows as much as a 265x improvement for the FAT32 file-system, and Linux 7.4 includes a memblock allocator performance optimization. Kernel developers are also looking at dropping the policy requirement to document AI contributions with an 'Assisted-by' tag.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.phoronix.com/news/October-2026-Highlights>

## Questions this post answers

### Is Linus Torvalds actually using Claude Code to write Linux kernel patches?

Yes, Linus Torvalds has used Claude Code to draft a significant Linux kernel I/O improvement, including generating initial patches and a test program. He also used AI/LLMs separately to make existing patches more decipherable, and in doing so the AI flagged additional long-standing bugs in the kernel that he had not previously noticed.

_Developers tracking AI's real role in kernel development can follow updates like this on daily.dev._

### Are Linux kernel developers still required to add an Assisted-by tag when AI helps write a patch?

That requirement may soon be dropped. Linux kernel policy currently requires patches with AI involvement to carry an 'Assisted-by:' tag disclosing the tool's use, but kernel developers are now considering removing this requirement because of how widespread AI/LLM use has become in patch creation.

_Anyone contributing kernel patches can watch daily.dev for how this AI disclosure policy shift plays out._

### What caused Linux kernel security vulnerabilities to leak onto the public mailing list?

Several new Linux kernel vulnerability reports were posted to the public kernel mailing list rather than the private security mailing list, apparently by accident. Some of the flagged vulnerabilities have CVSS scores as high as 9.0, and as of the report they remained unpatched on mainline, though fixes were in testing or queued in '-next' branches.

_Teams patching kernel CVEs can track disclosure incidents like this one on daily.dev._

## Similar posts on daily.dev

- [The Linux Kernel AI Flood, Linux 7.2 Release & Other August Highlights](https://daily.dev/posts/the-linux-kernel-ai-flood-linux-7-2-release-other-august-highlights-x4hdrqbto) · Phoronix · 1 upvotes · 0 comments
- [AI Code Gets Approved in the Linux Kernel… But With Strings Attached](https://daily.dev/posts/ai-code-gets-approved-in-the-linux-kernel-but-with-strings-attached-0nh5ps1dc) · It's Foss · 0 upvotes · 0 comments
- [Torvalds: AI is fine for competent devs, but spare us the 'drive-by' patches](https://daily.dev/posts/torvalds-ai-is-fine-for-competent-devs-but-spare-us-the-drive-by-patches-vdbe02qam) · The Register · 1 upvotes · 0 comments

---

Tags: [#open-source](https://daily.dev/tags/open-source), [#linux](https://daily.dev/tags/linux), [#claude-code](https://daily.dev/tags/claude-code)

[View this post on daily.dev](https://daily.dev/posts/ai-use-in-the-linux-kernel-microsoft-defender-on-linux-other-october-highlights-jddyncrth)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"AI Use In The Linux Kernel, Microsoft Defender On Linux \u0026 Other October Highlights","url":"https://daily.dev/posts/ai-use-in-the-linux-kernel-microsoft-defender-on-linux-other-october-highlights-jddyncrth","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/ai-use-in-the-linux-kernel-microsoft-defender-on-linux-other-october-highlights-jddyncrth"},"datePublished":"2026-11-01T11:00:38.423Z","dateModified":"2026-11-01T11:01:12.267Z","description":"October's roundup highlights several Linux kernel vulnerabilities accidentally posted to the public mailing list instead of the private security list, with...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4a2869c5ba3b4a1260a91b04adadcfd7?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4a2869c5ba3b4a1260a91b04adadcfd7?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Phoronix","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Phoronix","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/6a26ba379dd64932830aa0c9803dd7ee","url":"https://daily.dev/sources/phoronix"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/ai-use-in-the-linux-kernel-microsoft-defender-on-linux-other-october-highlights-jddyncrth","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"open-source,linux,claude-code","timeRequired":"PT11M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Phoronix","item":"https://daily.dev/sources/phoronix"},{"@type":"ListItem","position":3,"name":"AI Use In The Linux Kernel, Microsoft Defender On Linux \u0026 Other October Highlights"}]}
{"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/ai-use-in-the-linux-kernel-microsoft-defender-on-linux-other-october-highlights-jddyncrth#faq","mainEntity":[{"@type":"Question","name":"Is Linus Torvalds actually using Claude Code to write Linux kernel patches?","acceptedAnswer":{"@type":"Answer","text":"Yes, Linus Torvalds has used Claude Code to draft a significant Linux kernel I/O improvement, including generating initial patches and a test program. He also used AI/LLMs separately to make existing patches more decipherable, and in doing so the AI flagged additional long-standing bugs in the kernel that he had not previously noticed. Developers tracking AI's real role in kernel development can follow updates like this on daily.dev."}},{"@type":"Question","name":"Are Linux kernel developers still required to add an Assisted-by tag when AI helps write a patch?","acceptedAnswer":{"@type":"Answer","text":"That requirement may soon be dropped. Linux kernel policy currently requires patches with AI involvement to carry an 'Assisted-by:' tag disclosing the tool's use, but kernel developers are now considering removing this requirement because of how widespread AI/LLM use has become in patch creation. Anyone contributing kernel patches can watch daily.dev for how this AI disclosure policy shift plays out."}},{"@type":"Question","name":"What caused Linux kernel security vulnerabilities to leak onto the public mailing list?","acceptedAnswer":{"@type":"Answer","text":"Several new Linux kernel vulnerability reports were posted to the public kernel mailing list rather than the private security mailing list, apparently by accident. Some of the flagged vulnerabilities have CVSS scores as high as 9.0, and as of the report they remained unpatched on mainline, though fixes were in testing or queued in '-next' branches. Teams patching kernel CVEs can track disclosure incidents like this one on daily.dev."}}]}
```

