Backporting security fixes to stable releases

Trail of Bits argues that stable and LTS software often lacks backported fixes for known CVEs, leaving users exposed to exploitation by AI agents, and cites kernel and Debian/Ubuntu CVE counts as a measure of the gap. The post describes using Codex with GPT-5.6 to find fixes that apply cleanly to stable kernel trees, with 142 fixes covering 90 CVEs now applied, and says the team has begun sending backported patches to Linux distributions. It invites open source projects and distributions to apply at trailofbits.com/patch-the-planet for help.