CVE-2026-98432

Headlines · 2

1. 7h
   Claude Reportedly Finds 11-Year-Old Linux Kernel Flaw

   Anthropic security research reportedly found CVE-2026-98432, a network-reachable use-after-free flaw in the Linux kernel's IPv4 TCP handshake handling. The report says an unpublished internal Claude model discovered the issue and generated a two-stage exploit that bypassed kernel address randomization and executed commands with Root privileges, although the exploit code was not released. Upstream fixes are available, but the cited report says several Ubuntu releases remained affected as of November 1.

   cnBeta · 🔥 12
2. 3d
   Linux CVE-2026-98432 Exposes IPv4 TCP Use-After-Free

   Linux kernel CVE-2026-98432 is a remotely reachable use-after-free in the IPv4 TCP handshake, rated CVSS 3.1 9.8 Critical by the Linux kernel CNA. Fixes have shipped in multiple upstream branches, including 6.12.113 and 6.18.56, but Ubuntu, RHEL 8, RHEL 9, RHEL 10 and other distribution packages remained vulnerable as of October 29. Anthropic separately reported that an undisclosed Claude research model wrote a working proof-of-concept exploit against Linux servers with an MPTCP listener, though that claim was not independently verified in the supplied evidence.

   Hacker News 首页（100+ 分） · 🔥 1

Experience and discussion from the community

Share my CVE-2026-98432 experienceAsk about CVE-2026-98432