AWS details AI agent for triaging Linux kernel CVEs

AWS engineers described at the Linux Plumbers Conference how they triage Linux kernel CVEs for EC2: a script filters out about 70% of records, an AI agent processes the rest in roughly 3.4 seconds per CVE, and two engineers review the output. The team estimates 5–10% of the agent's decisions are problematic.

• Script discards ~70% of CVEs by kernel version and built files
• AI agent needs ~3.4 seconds per CVE versus minutes for a person
• Team estimates 5–10% of agent decisions are problematic
• Linux 5.10 had 1,709 unfixed CVEs versus 229 in 6.18