TECH

Torvalds tightens Linux kernel rules to reject deluge of low-value AI fixes
For about the past week, Linux kernel creator Linus Torvalds has been voicing complaints about "the continued flood of AI reports" making the list of security fixes unmanageable due to duplicate entries, and says it is now starting to choke the flow of new fixes in general due to the size of the Linux 7.1 Release Candidate 5 (rc5) becoming much larger than it should be. It's not that Torvalds has become strictly anti-AI, but rather that it's only good when it's actually helps.
AI bugs flood security lists...Torvalds states that security mailing lists have meanwhile become “almost completely unmanageable” due to large volumes of AI-generated reports. Often, different individuals using the same tools reportedly submit the exact same vulnerabilities. As a result, developers waste time forwarding reports or replying that an issue has already been resolved.
According to Torvalds, it makes little sense to continue handling these reports via private security lists, as AI tools often detect the same bugs all at once.
“Add real value”...While Torvalds does not reject AI tools, he emphasizes that they are only useful when they effectively contribute to development. He calls on developers not to simply forward automatically generated reports without an understanding of the codebase.
Instead, he expects contributors to read documentation, understand what the problem entails, and, if possible, provide a patch or solution immediately. Torvalds calls “drive-by” reports without technical knowledge a problem within the Linux community.
In addition to the criticism of AI, Torvalds reports that Linux 7.1-rc4 is otherwise a fairly normal release candidate. About half of the changes are again in drivers, with GPU updates being the largest component. Furthermore, the release includes changes for networking, file systems, architecture updates, and kernel functionality.
Last week, the problem was that AI tools were producing duplicate bug reports from different people, sometimes even finding issues that were already fixed. Even with AI working as intended, reckless use of it without due diligence results in lots of extra work for Torvalds and other people in charge of actually maintaining the kernel and picking what fixes or additions get added with each update.
This week, AI isn't the only culprit behind rc5 becoming so unreasonably large. The bulk of it is "trivial stuff" fixing or adding random drivers, according to Torvalds, which isn't traditionally the purpose of release candidate updates. Usually, release candidate updates are meant to address critical fixes, including security problems like SSH-keysign-pwn or Copy Fail and actual regressions in functionality. While AI can be (and is) blamed for a lot of minor fixes being stuffed into the release candidate window, the other problem is with the developers themselves focusing the tools on non-essential fixes.

As Linus points out, trivial fixes en masse are not conducive to long-term stability. Thus, as stated by Linus, developers are being implored to look closer at their pull requests and determine whether or not they're serious enough for late-cycle release candidate updates.
Linus Torvalds loses patience with AI-generated code fixes bloating the Linux kernel...Torvalds said that this release candidate is unsurprisingly bigger than RC5’s have historically been. However, he said he is “not entirely happy about it” because the bloat is being caused by “totally trivial stuff”. He said that he doesn’t think the churn is worth it at this point in the cycle and is now insisting that developers look more closely at their pull requests to see if they’re submitting a fix for a regression, or whether it shouldn’t just be included in the next cycle.
For those who are unaware, a Linux kernel cycle usually consists of seven release candidates, after which the new kernel is released ready for distribution maintainers to provide to their users. If things get delayed, we can see an eighth release candidate. This is why Torvalds is complaining about the size of RC5; at this stage he is expecting things to have quietened down, but that’s not happening thanks to the use of AI tools.
Going forward, the Linux founder says he will “start being a bit more hardnosed” about this unnecessary churn this late in the cycle. He said that at this point in the development, the objective is to look for regressions, not non-critical fixes to long-standing issues that should have been submitted earlier in the cycle.
In terms of the fixes this week, there are a bunch of file systems, graphics cards, memory management, networking, security and stability, and hardware. In the hardware fixes, there are bug fixes for the HP Pavilion Plus 14, ASUS Armoury, and the Lenovo Yoga 7 14AGP11.
mundophone


