PrimSynth Uses Coordinated Agents to Discover and Validate Linux Kernel Exploit Primitives Across 16 CVEs

arXiv 2609.02647·medium signalXBlueskyLinkedInCopy link

The persistent gap in automated kernel exploitation is conceptual, between abstract exploit strategies and concrete technical operations. PrimSynth closes it with a formal characterization of six classes of exploit primitive running from logical capability to validatable effect, plus an extended strategy representation coupling primitive-upgrading strategies with path code synthesis rules governing object constraints, temporal sequencing, environment prerequisites and validation constraints. A multi-agent framework runs these representations in an iterative closed loop until valid primitives are found, using validation signals as evidence of exploitable state transitions, with extraction grounded in vulnerability-directed execution inside a rebootable validation environment; it is evaluated on 16 real-world Linux kernel CVEs spanning 5 vulnerability classes.