{"data":{"id":"f3764146-6055-4741-9434-903e75cb38d3","title":"Anthropic AI model finds Linux kernel bug that leads to remote root access","summary":"Anthropic disclosed a zero-click exploit, developed with an unreleased Claude research model, that lets an unauthenticated attacker run arbitrary commands as root on Linux servers running an MPTCP listener. The flaw, tracked as CVE-2026-98432, is a race-condition-induced use-after-free in the Linux kernel's IPv4 TCP connection handling, rated 9.8 critical and affecting kernels dating back to version 4.4. Anthropic's proof of concept took about 53 minutes from memory leak to root command execution.","solution":"Fixed releases include 5.10.272, 5.15.223, 6.6.159, 6.1.190, 6.12.113, 6.18.56, 7.2.10 and 7.3-rc7. Administrators are advised to review their kernel versions, apply the relevant security updates, and assess whether their systems expose MPTCP listeners.","labels":["security","industry"],"sourceUrl":"https://www.csoonline.com/article/4242724/anthropic-ai-model-finds-linux-kernel-bug-that-leads-to-remote-root-access.html","publishedAt":"2026-10-30T12:27:11.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Anthropic","Claude"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-30T12:27:11.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":null,"llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}