{"id":"https://openalex.org/W7160595714","doi":"https://doi.org/10.48550/arxiv.2605.06601","title":"Patch2Vuln: Agentic Reconstruction of Vulnerabilities from Linux Distribution Binary Patches","display_name":"Patch2Vuln: Agentic Reconstruction of Vulnerabilities from Linux Distribution Binary Patches","publication_year":2026,"publication_date":"2026-05-07","ids":{"openalex":"https://openalex.org/W7160595714","doi":"https://doi.org/10.48550/arxiv.2605.06601"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.06601","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.06601","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.06601","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135652840","display_name":"Isaac David","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"David, Isaac","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5135717561","display_name":"Arthur Gervais","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gervais, Arthur","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.3425999879837036,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.3425999879837036,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.20340000092983246,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.18209999799728394,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/bounded-function","display_name":"Bounded function","score":0.682699978351593},{"id":"https://openalex.org/keywords/oracle","display_name":"Oracle","score":0.6675000190734863},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.6208999752998352},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5873000025749207},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.5005999803543091},{"id":"https://openalex.org/keywords/function","display_name":"Function (biology)","score":0.3767000138759613},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.37549999356269836},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.375},{"id":"https://openalex.org/keywords/model-checking","display_name":"Model checking","score":0.3643999993801117},{"id":"https://openalex.org/keywords/binary-classification","display_name":"Binary classification","score":0.3555000126361847}],"concepts":[{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.682699978351593},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6766999959945679},{"id":"https://openalex.org/C55166926","wikidata":"https://www.wikidata.org/wiki/Q2892946","display_name":"Oracle","level":2,"score":0.6675000190734863},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.6208999752998352},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5873000025749207},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.5005999803543091},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45739999413490295},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3783999979496002},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.3767000138759613},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.37549999356269836},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.375},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.3643999993801117},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.3555000126361847},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.3537999987602234},{"id":"https://openalex.org/C92446256","wikidata":"https://www.wikidata.org/wiki/Q3306762","display_name":"Data validation","level":2,"score":0.3377000093460083},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3357999920845032},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.3345000147819519},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.32739999890327454},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.3138999938964844},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.3125999867916107},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.30399999022483826},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3009999990463257},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.2913999855518341},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.28529998660087585},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.28290000557899475},{"id":"https://openalex.org/C110121322","wikidata":"https://www.wikidata.org/wiki/Q865811","display_name":"Distribution (mathematics)","level":2,"score":0.2818000018596649},{"id":"https://openalex.org/C2776836416","wikidata":"https://www.wikidata.org/wiki/Q1364844","display_name":"False alarm","level":2,"score":0.2786000072956085},{"id":"https://openalex.org/C2780876879","wikidata":"https://www.wikidata.org/wiki/Q3054749","display_name":"Meaning (existential)","level":2,"score":0.2768999934196472},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.27549999952316284},{"id":"https://openalex.org/C121610932","wikidata":"https://www.wikidata.org/wiki/Q243754","display_name":"Binary search algorithm","level":3,"score":0.26899999380111694},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.26759999990463257},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.2646999955177307},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.2621000111103058},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2587999999523163},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.25769999623298645}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.06601","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.06601","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.06601","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.06601","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.8152087926864624,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Security":[0],"updates":[1],"create":[2],"a":[3,42,61,89,127,222],"short":[4],"but":[5,190],"important":[6],"window":[7],"in":[8,20,132,145],"which":[9],"defenders":[10],"and":[11,16,74,82,95,110,120,138,207,231],"attackers":[12],"can":[13,50],"compare":[14],"vulnerable":[15],"patched":[17],"software.":[18],"Yet":[19],"many":[21],"operational":[22],"settings,":[23],"the":[24,52,161,167,236],"most":[25],"accessible":[26],"artifacts":[27],"are":[28,203],"binary":[29,162,219],"packages":[30],"rather":[31],"than":[32],"source":[33],"patches":[34,220],"or":[35,164,196],"advisory":[36],"text.":[37],"This":[38],"paper":[39],"asks":[40,83],"whether":[41],"language-model":[43],"agent,":[44],"restricted":[45],"to":[46,87],"local":[47,232],"binary-derived":[48],"evidence,":[49],"reconstruct":[51],"security":[53,136,154],"meaning":[54],"of":[55,134,147],"Linux":[56],"distribution":[57],"updates.":[58],"Patch2Vuln":[59,100],"is":[60],"local,":[62],"resumable":[63],"pipeline":[64],"that":[65,152,228],"extracts":[66],"old/new":[67,185],"ELF":[68],"pairs,":[69],"diffs":[70],"them":[71],"with":[72,170],"Ghidra":[73],"Ghidriff,":[75],"ranks":[76],"changed":[77],"functions,":[78],"builds":[79],"candidate":[80],"dossiers,":[81],"an":[84,140],"offline":[85],"agent":[86,125],"produce":[88,208],"preliminary":[90],"audit,":[91],"bounded":[92,177],"validation":[93,178,210,234],"plan,":[94],"final":[96,142],"audit.":[97],"We":[98],"evaluate":[99],"on":[101],"25":[102],"Ubuntu":[103],"`.deb`":[104],"package":[105],"pairs:":[106],"20":[107,135],"security-update":[108],"pairs":[109,137,155],"five":[111,200],"negative":[112,201],"controls,":[113],"all":[114,199],"manually":[115],"adjudicated":[116],"against":[117],"private":[118],"source-patch":[119],"binary-function":[121],"ground":[122],"truth.":[123],"The":[124],"localizes":[126],"verified":[128],"security-relevant":[129],"patch":[130],"function":[131],"10":[133],"assigns":[139],"accepted":[141],"root-cause":[143],"class":[144],"11":[146],"20.":[148],"Oracle":[149],"diagnostics":[150],"show":[151],"six":[153],"fail":[156],"before":[157],"model":[158],"reasoning":[159],"because":[160],"differ":[163],"ranker":[165],"omits":[166],"right":[168],"function,":[169],"one":[171],"additional":[172],"context-export":[173],"miss.":[174],"A":[175],"separate":[176],"pass":[179],"produces":[180],"two":[181],"target-level":[182],"minimized":[183],"behavioral":[184,233],"differentials,":[186],"both":[187],"for":[188],"tcpdump,":[189],"no":[191,209],"crash,":[192],"timeout,":[193],"sanitizer":[194],"finding,":[195],"memory-corruption":[197],"proof;":[198],"controls":[202],"classified":[204],"as":[205,221],"unknown":[206],"differentials.":[211],"These":[212],"results":[213],"support":[214],"agentic":[215],"vulnerability":[216],"reconstruction":[217],"from":[218],"useful":[223],"research":[224],"target":[225],"while":[226],"showing":[227],"binary-diff":[229],"coverage":[230],"remain":[235],"limiting":[237],"components.":[238]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-09T00:00:00"}