Open Source Summit Korea 2026

Global security regulations such as the EU Cyber Resilience Act (CRA) have raised security requirements for embedded products. Open source components, especially the Linux kernel, must now support systematic vulnerability management, fast security patching, and long-term maintenance, making kernel security a key challenge.

This session discusses practical solutions for managing Linux kernel vulnerabilities in embedded products. It begins with an overview of recent kernel CVE trends and their impact on long-lived and customized kernels. The session then introduces a CI-based vulnerability response pipeline designed to minimize the time from CVE disclosure to patch deployment.

A key challenge is backporting security fixes to older or vendor-modified kernels, where patches often do not apply cleanly. To address this, the session presents an AI agent–based approach that assists developers by analyzing CVE data, upstream patches, and kernel context to suggest candidate backports.

By adopting an AI-assisted vulnerability response workflow, teams can reduce response time and prepare for compliance with evolving global security regulations.