Tag

CVE-2026-98432

2 stories

Linux TCP use-after-free (CVE-2026-98432): Anthropic’s exploit, vendor status, and what admins should do

A serious race-condition bug in the Linux kernel’s IPv4 TCP path, tracked as CVE-2026-98432, has drawn attention because the kernel team rated it 9.8/10 on the CVSS scale and because Anthropic says its AI model wrote an exploit that achieved root command execution against servers running a multipath TCP (MPTCP) listener. Vendors and distributions have diverging severity scores and staggered patch timelines, leaving many administrators deciding whether to wait for…

Saugata DattaOct 30, 20265 min read9

AI Agents and Frameworks

Claude-written exploit exposes critical Linux kernel race, patches and uncertain attack path

Anthropic’s Frontier Red Team disclosed a striking research result: an unreleased Claude model produced a working exploit for a critical Linux kernel vulnerability tracked as CVE-2026-98432. According to Anthropic, the proof-of-concept lets a remote attacker run commands as root without a login or user interaction. The company treated the work as a lab test and said the underlying bug has been fixed upstream and backported to maintained kernel branches—but distribution…

Saugata DattaOct 29, 20263 min read14

Linux TCP use-after-free (CVE-2026-98432): Anthropic’s exploit, vendor status, and what admins should do

Claude-written exploit exposes critical Linux kernel race, patches and uncertain attack path

Free Tools: IP, DNS, SSL