AWS engineers detail AI-assisted triage for Linux kernel vulnerabilities
Amazon Web Services uses a mix of automated scripts, AI agents, and human review to manage the surge in kernel CVEs, with a focus on moving to newer long-term-support kernels.
Engineers from Amazon Web Services (AWS) have outlined the team's process for handling Linux kernel Common Vulnerabilities and Exposures (CVEs), using an automated filter, an AI agent and human review, during a talk at the Linux Plumbers Conference in Prague. Dylan Johnson and Justinien Bouron described how the team manages the kernel used in EC2 infrastructure, separate from Amazon Linux or customer virtual machine kernels, as the number of CVEs has soared since the kernel project became a CVE Numbering Authority in February 2024.