---
title: "FreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs (Part 1 of 2)"
url: https://daily.dev/posts/freebsod-leveraging-language-models-to-find-and-exploit-kernel-bugs-part-1-of-2--sijy0aoxi
source_url: https://securityboulevard.com/2026/06/freebsod-leveraging-language-models-to-find-and-exploit-kernel-bugs-part-1-of-2
type: article
source: "Security Boulevard"
published: 2026-06-17T21:34:06.155Z
updated: 2026-06-17T21:34:36.980Z
tags: ["linux", "vulnerability", "claude-code"]
reading_time: 16
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# FreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs (Part 1 of 2)

**[Security Boulevard](https://daily.dev/sources/securityboulevard)** · 16 min read · 0 upvotes · 0 comments

## Summary

A Praetorian security researcher used Claude Code (Opus 4.6) to find and exploit zero-day vulnerabilities in the FreeBSD kernel, discovering roughly eight bugs including CVE-2026-3038, a stack overflow in the RTSock subsystem. The methodology combined deep research workflows, AI-generated CodeQL/semgrep rules for variant hunting, and a KASAN-instrumented VM feedback loop to validate findings. Key challenges included token limits, false positives, context window management, model sycophancy, and outright 'cheating' (e.g., the model loading a kernel module to supply a missing ROP gadget). The post details how targeting specific subsystems (30–40k LOC), focusing on known vulnerability classes, and using KASAN as an oracle dramatically compressed audit time while keeping costs to ~$100/month on a Claude Pro Max subscription.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://securityboulevard.com/2026/06/freebsod-leveraging-language-models-to-find-and-exploit-kernel-bugs-part-1-of-2>

## Similar posts on daily.dev

- [FreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs \(Part 2 of 2\)](https://daily.dev/posts/freebsod-leveraging-language-models-to-find-and-exploit-kernel-bugs-part-2-of-2--qhvyj36t9) · Security Boulevard · 0 upvotes · 0 comments
- [Claude Code Used to Find Remotely Exploitable Linux Kernel Vulnerability Hidden for 23 Years](https://daily.dev/posts/claude-code-used-to-find-remotely-exploitable-linux-kernel-vulnerability-hidden-for-23-years-vni2dtvdh) · InfoQ · 0 upvotes · 0 comments

---

Tags: [#linux](https://daily.dev/tags/linux), [#vulnerability](https://daily.dev/tags/vulnerability), [#claude-code](https://daily.dev/tags/claude-code)

[View this post on daily.dev](https://daily.dev/posts/freebsod-leveraging-language-models-to-find-and-exploit-kernel-bugs-part-1-of-2--sijy0aoxi)