AWS Uses AI to Tame Linux CVEs

At the Linux Plumbers Conference, AWS engineers described tackling a massive increase in Linux kernel CVE disclosures by using automated applicability filtering (eliminating ~70% of CVEs) and an AI triage agent to summarize remaining issues for human reviewers; despite faster triage, they stress that continuous upgrading to newer LTS kernels is essential because long-supported older branches accumulate unfixed vulnerabilities and backporting is costly and error-prone.