OpenAI o3 Finds Linux Kernel Zero-Day CVE-2025-37899

May 22, 2025

Researcher Sean Heelan used o3 on Linux ksmbd code and found CVE-2025-37899, a previously unknown use-after-free flaw missed in human review.

Sources

Sean Heelan

Analysis · May 22, 2025

How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel's SMB implementation