Linus Torvalds and Dirk Hohndel at Open Supply Summit North America 2026
sjvn/ZDNET
Observe ZDNET: Add us as a preferred source on Google.
ZDNET’s key takeaways
- Torvalds likes AI, however AI typically would not like Torvalds.
- Linux’s founder thinks there’ll all the time be work for programmers.
- AI continues to be a combined blessing in the case of discovering and fixing safety bugs.
Talking on the Linux Basis’s Open Source Summit North America, Linux creator Linus Torvalds stated trendy AI instruments are reshaping how builders work on the kernel, driving up contribution quantity and exposing new social and safety stresses within the open‑supply world. However he insisted “AI is a good instrument, however it’s a instrument” moderately than a wholesale substitute for programmers.
Now, if solely the businesses laying off tech staff left and proper would hear.
Additionally: Microsoft surprises with its first server Linux distribution: Azure Linux 4.0
Torvalds spoke with Verizon’s Open Supply Program Workplace Head Dirk Hohndel, who can be a Linux kernel maintainer and a good friend of Torvalds’. Torvalds added that whereas the Linux kernel’s lengthy‑standing launch course of has been steady “for just about precisely 20 years” for the reason that transfer to Git, that pattern broke about six months in the past as AI coding instruments took off.
“Within the final six months, we have seen much more commits,” Torvalds famous, estimating that “the final two releases, it has been about 20% extra commits than we had within the earlier releases over a few years.”
Initially, Torvalds misinterpret the spike as pleasure round a significant model change: “At first I believed, ‘hey, individuals are excited concerning the 7.0 launch as a result of I modified the most important quantity each occasionally…’ and it seems I used to be unsuitable. The actual change that occurred within the final six months was that the AI instruments really obtained adequate for lots of people… we’re seeing a particular uptick in simply improvement on just about all fronts.”
Torvalds acknowledged that the brand new instruments decrease the barrier of entry for contributors, echoing Hohndel’s commentary that “the tooling really lowers this preliminary barrier… [and] does an enormous chunk of the work.” However he emphasised that the true impression is social moderately than purely technical: “The massive ache factors in Linux, historically, and I think in most initiatives, haven’t been a lot the code itself, however… if you end up compelled to vary how you’re employed.”
Additionally: Ubuntu Core 26 offers an immutable Linux you can trust through 2041
One of many largest flashpoints has been the Linux kernel security mailing list, which Torvalds said was recently “overrun by duplicate reports” generated with AI.
“Folks assume that once they discover a bug with AI, the primary response typically appears to be, let’s ship it to the safety checklist, as a result of this will likely have safety implications,” he stated. The consequence, on a intentionally small, confidential checklist, was that “we had been flooded by individuals sending bugs, after which you’ve gotten this checklist with only a few individuals on it… and we spent all our time simply forwarding these reviews to… the opposite builders who knew that space higher.”
AI and Safety
To manage, Torvalds introduced new AI safety disclosure tips with a blunt rule: “Should you discover a safety bug with AI, you need to mainly think about it to be public, simply because if you happen to discovered it with AI, 100 different individuals additionally discovered it with AI.”
On the similar time, he urged researchers to not publish working exploits: “In the case of issues that basically are safety points, it’s possible you’ll not wish to make the exploit public… Do not be that man who then crows about it publicly and says, ‘Look, I may deliver down this massive firm.'”
Torvalds linked the disclosure debate to broader shifts within the safety ecosystem. Up to now, he stated, the kernel neighborhood would quietly notify distributions a few bug and ask them to improve with out detailing the vulnerability, and “more often than not, no one would determine what occurred.” Now, with AI‑accelerated evaluation, he recalled that “final week, we mounted the bug; inside three hours, there was a weblog submit concerning the implications of that bug repair, as a result of safety individuals love getting consideration.”
Additionally: The 4th Linux kernel flaw this month can lead to stolen SSH host keys
He went out of his solution to argue that closing the supply just isn’t a solution: “I do not assume, for instance, that the answer is to not do open supply, as a result of if you happen to assume that AI cannot reverse engineer closed supply, you are in for a shock.” The truth is, he warned, “closed supply is even worse on this respect, as a result of the AI cannot enable you to repair the issues, however the AI positive may also help discover these issues within the first place.”
Torvalds is correct. Whereas Home windows vulnerabilities, apart from the really horrid ones, now not obtain a lot consideration, AI can be discovering loads of safety holes in Home windows as properly. As Dustin Childs, head of risk consciousness at Development Micro’s Zero Day Initiative, noticed not too long ago, “Microsoft’s total count came to 1,139 CVEs patched in 2025,” which was the second-highest, behind 2020. Childs expects, “as AI bugs grow to be extra prevalent, this quantity is more likely to go greater in 2026.”
In the meantime, again at Open Supply Summit, Hohndel criticized distributors who hype vulnerabilities with out responsibly coordinating fixes. He cited 4 current native privilege escalation bugs within the kernel, “two of which had been disclosed precisely” with branded names, domains, and logos earlier than maintainers had been contacted. “My response is all the time, here’s a firm I by no means wish to work with, as a result of if you happen to do this to the Linux kernel, you do that to anybody.”
Love, hate, and AI
As annoying as that is, Torvalds admitted to having a love‑hate relationship with AI. “I really actually prefer it from a technical angle. I really like the instruments. I discover it very helpful and attention-grabbing, however it’s positively inflicting ache factors,” he stated.
Additionally: 10 trillion downloads are crushing open-source repositories – here’s what they’re doing about it
On the optimistic facet, he framed AI‑found bugs as “short-term ache” with lengthy‑time period advantages: “When AI finds a bug in any supply code… long run is you discovered a bug, we mounted it, that the top result’s higher for it.” In any case, he continued, “I feel discovering bugs is nice, as a result of the true downside is all of the bugs you did not discover.”
However he warned of “social choke factors and social ache factors” as AI pours site visitors into already overstretched communities, particularly within the “10s of 1000s of random initiatives that individuals preserve that aren’t the Linux kernel.” For small groups or solo maintainers, he stated, flood‑type AI bug reviews may cause actual burnout, particularly when “it is a bug report, and whenever you ask for extra info, the particular person has carried out a drive-by and would not even reply your questions anymore.”
Torvalds added that upkeep is more and more about individuals moderately than code. “For me, as a top-level maintainer, I do not do numerous coding. My job is working with individuals, and I don’t use AI to work with individuals. Thanks. And I ought to counsel you do not do this both.” Torvalds has come a good distance from the times when he was known for treating poor coders with contempt.
The way forward for AI and programming work
Stepping away from Linux, when requested what recommendation he would give to somebody originally of their profession amid doom‑and‑gloom forecasts that “all code shall be written by AI,” Torvalds pushed again exhausting on advertising claims.
“My opinion has all the time been that AI is a good instrument, however it’s a instrument, and once I see individuals saying, ‘hey, 99% of our code is written by AI,’ I actually get indignant.”
He contrasted these claims with the truth that “100% of their code is written by compilers,” and traced his personal path from hand‑entered machine code to assemblers, then compilers, and now AI helpers. “I grew up writing machine code, and once I say machine code, I do not imply meeting language, I imply the numbers,” he stated, recalling that “it took me some time to know that writing down the numbers and calculating offsets for branches is form of silly, and other people had provide you with this instrument referred to as an assembler, after which in a while I found out compilers are good too. Lately, I am determining AI instruments are good too.”
So, Torvalds argued, “I am personally 100% satisfied that AI is altering programming, however it’s not altering the basics.” Simply as compilers elevated productiveness “by an element of 1000,” he estimates that “AI will enhance your productiveness by an element of 10,” however insists “AI is nice, however AI just isn’t altering programming.”
As an alternative, he contended, “lots of people will use AI to generate the code that the compilers use to generate the code that the assemblers then use to generate the machine code. That is revolutionary in the identical sense that we have seen revolutions earlier than.”
Crucially, Torvalds stated, would‑be builders nonetheless want to know what their instruments produce. “You do wish to perceive the way it all works ultimately,” he stated. “Even once I use AI for my pet toy initiatives, I’ll use AI to generate code, I’ll take a look at that code, I’ll really nonetheless take a look at the meeting language… as a result of it is what I grew up with.” For any critical, lengthy‑lived system, he warned, “it’s good to perceive not simply your prompts, however it’s good to perceive the top consequence too, as a result of that is the one manner you possibly can preserve it long run.”
Additionally: 51% of professionals say AI workslop lowers their productivity – stop it in 2 steps
All through the session, Torvalds returned to a constant theme: open supply and now AI instruments are highly effective methods to handle software program complexity, however they don’t substitute the necessity for human judgment, neighborhood norms, and a deep understanding of the programs being constructed.
“Software program could be very difficult,” he stated, and “the one actually good solution to handle the complexity of a fancy infrastructure is open supply,” with AI now layered in as only one extra instrument within the programmer’s toolbox.
