DECRYPT · 2026-11-02 20:36 UTC

Claude-Built Linux Exploit Targets Bug That Ubuntu Still Hasn't Patched

Anthropic's Claude AI generated a working exploit for CVE-2026-98432, a critical Linux vulnerability (9.8/10 severity) present since kernel 4.4 that allows remote root access without authentication. Ubuntu has not yet patched the flaw across versions 16.04 to 26.10, while Red Hat, Debian, SUSE, Oracle Linux and Amazon Linux have released fixes; the exploit requires less than an hour to execute. The vulnerability exploits a race condition in memory handling and affects systems using multipath TCP, though the underlying bug is not limited to that feature.

Loading the story on Tree News…