I used o3 to find a remote zeroday in the Linux SMB implementation(sean.heelan.io)
586 points by zielmicha | 184 comments
Sean Heelan's blog post describing how he used OpenAI's o3 model to discover CVE-2025-37899, a remote zero-day in the Linux kernel's SMB (ksmbd) implementation.








































![Screenshot of gsmaragd.github.io: Exposed Industrial Control Systems and Honeypots in the Wild [pdf]](https://hn.urlbox.com/shots/renders/2025/5/25/b578138f-bfc0-42f3-86f9-8e67ad3fe073.jpg)
![Screenshot of nicole.express: Using the Apple ][+ with the RetroTink-5X](https://hn.urlbox.com/shots/renders/2025/5/25/5188dc9d-bc92-4820-bde4-e28469111f08.jpg)


![Screenshot of simon.peytonjones.org: The Verse Calculus: A Core Calculus for Functional Logic Programming [pdf]](https://hn.urlbox.com/shots/renders/2025/5/25/e92a2346-d6db-4a60-b098-b6e9dd028a79.jpg)







