Linux Researcher And Developer Says 'there Are Bugs In Your Kernel... (2026)

What's bug's scarier than a spider? That's right, a Linux bug 😱

Linux is a beautiful thing. From a completely open-source base, we have probably ten quintillion different distros that treat us like adults, capable of actually owning, controlling, and tinkering with our software. Including, of course, recent boons for gaming such as SteamOS, Bazzite, and Nobara. But that very same free and open foundation might also bring with it some hurdles, such as longstanding bugs.

Researcher and developer Jenny Guanni Qu recently looked at the Linux kernel's bug fixes and found tons of them stick around for a very long time. As someone who feels the allure of Linux distributions and occasionally succumbs to it before quickly scarpering back to Windows when confronted with bugs—usually small and irksome ones, but occasionally catastrophic—this information does not help me. So if you're the same as me: you're welcome.

Qu built a tool to filter through Linux kernel changes and used it to filter for every fix since 2005. "Six hours later, I had 125,183 vulnerability records." Looking at these fixes, she found that the average lifetime of a bug, ie, a bug existing and potentially causing problems for users, was 2.1 years over the 20-year time frame. And 13% of those bugs had been around for five years or more before being fixed.

If we look at just the bugs that were fixed in 2025, that share increases to 20% of said bugs being around for five years or more, but this is because of a peculiar way the stats can get skewed by taking such a small snapshot. In fact, Qu says, "bugs introduced in recent years appear to get fixed much faster.."

Qu's entire investigation acts as a bit of a warning to make sure you're doing good statistics. For instance, they explain: "Bugs introduced in 2010 took nearly 10 years to find and bugs introduced in 2024 are found in 5 months. At first glance it looks like a 20x improvement! But here's the catch: this data is right-censored. Bugs introduced in 2022 can't have a 10-year lifetime yet since we're only in 2026. We might find more 2022 bugs in 2030 that bring the average up."

Instead, if we compare the stats that actually matter and make sense, we are improving: "We're simultaneously catching new bugs faster AND slowly working through ~5,400 ancient bugs that have been hiding for over 5 years."

It's not all the same across the board, of course: some kinds of bugs are fixed faster than others. Networking bugs tend to take longer, and GPU

Source: PC Gamer