TLDR: OVSwrap (CVE-2026-64531) is a non-universal (but broad) Linux LPE found by giving LLMs the tools to reason through memory safety issues’ geometry (coupled with CIFSwitch -discovery-style graph reasoning tools). Read on for affected distros, mitigations, and vulnerability details. 

 Background
 
 
 
 # 
 
 
 
 In CIFSwitch , we gave models the…
TLDR: CIFSwitch (CVE-2026-46243) is a distro-specific Linux LPE found by harnessing LLMs into better multihop knowledge composition. Read on for affected distros, mitigations, and vulnerability details. 

 Background
 
 
 
 # 
 
 
 
 In Getting LLMs Drunk to Find Remote Linux Kernel OOB
Writes (and More) ,
I’d mentioned how improving…
TLDR: the grossly overengineered, self-orchestrating team of vulnerability-hunting agents detailed below has discovered 20+ CVEs over the past few months, including CVE-2026-31432 and CVE-2026-31433 : two remote, unauthenticated OOB writes in the Linux kernel’s ksmbd . Read on for the details of the setup that achieved this, including – yes! – getting LLMs drunk. 

…
TLDR: my self-orchestrating team of vulnerability hunting agents discovered two issues in CUPS, CVE-2026-34980 and CVE-2026-34990 , chainable into unauthenticated remote attacker -> unprivileged RCE -> root file (over)write . See below for the prerequisites, details, and mitigation options. 

 Intro
 
 
 
 # 
 
 
 
 CUPS is the standard way to do printing on…