United StatesAnthropic says Claude wrote a remote root exploit for Linux.
CVE-2026-98432 affects every Linux kernel since 4.4 without the fix, including container hosts.
A remote peer with no login triggers a use-after-free during the network handshake, and the kernel team rates it Critical, 9.8 of 10.
Anthropic has not published the exploit, which targets servers listening for multipath connections.
Ubuntu and Red Hat Enterprise Linux 8, 9 and 10 had no fix on 31 October.
How each outlet framed it
drawn from 600+ reports worldwide
- Hacker News leans critical
- stresses the lag between a four-line upstream fix and distro kernels still 'Vulnerable'; credits Claude with a working root exploit
Sources: Hacker News