{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Linux kernel CVE-2026-98432: TCP use-after-free rated 9.8, Anthropic says its AI built a remote root exploit · updates",
  "home_page_url": "https://pwn.watch/i/linux-kernel-ipv4-tcp-uaf-cve-2026-98432",
  "feed_url": "https://pwn.watch/i/linux-kernel-ipv4-tcp-uaf-cve-2026-98432/feed.json",
  "description": "CVE-2026-98432 is a race-condition use-after-free in the Linux kernel's IPv4 TCP handshake code (ireq_opt/inet_opt freed without an RCU grace period), fixed upstream on Oct 15 and rated 9.8 by the kernel CNA. On Oct 28 Anthropic said an unreleased Claude model turned the bug into a zero-click remote root exploit against servers running a multipath TCP listener (about 48 minutes to defeat KASLR, five more to get a shell). The exploit was built in a lab and is not known to be used in attacks. Update to a fixed stable kernel.",
  "language": "en",
  "_pwn": {
    "slug": "linux-kernel-ipv4-tcp-uaf-cve-2026-98432",
    "severity": "critical",
    "status": "live",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/linux-kernel-ipv4-tcp-uaf-cve-2026-98432/feed.xml",
    "llms": "https://pwn.watch/i/linux-kernel-ipv4-tcp-uaf-cve-2026-98432/llms.txt",
    "json": "https://pwn.watch/i/linux-kernel-ipv4-tcp-uaf-cve-2026-98432.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/linux-kernel-ipv4-tcp-uaf-cve-2026-98432#2026-10-28-8a18c397",
      "url": "https://pwn.watch/i/linux-kernel-ipv4-tcp-uaf-cve-2026-98432#2026-10-28-8a18c397",
      "title": "Linux kernel CVE-2026-98432: TCP use-after-free rated 9.8, Anthropic says its AI built a remote root exploit: Anthropic's Frontier Red Team says an unreleased Claude model chained the bug into a zero-click remote root exploit on servers with a multipath TCP listener; the CVE record itself describes an IPv4 TCP fix, and only Anthropic's post links the two.",
      "content_text": "Linux kernel CVE-2026-98432: TCP use-after-free rated 9.8, Anthropic says its AI built a remote root exploit: Anthropic's Frontier Red Team says an unreleased Claude model chained the bug into a zero-click remote root exploit on servers with a multipath TCP listener; the CVE record itself describes an IPv4 TCP fix, and only Anthropic's post links the two.\n\nSource: https://www.anthropic.com/research/discovering-vulnerabilities-with-claude",
      "date_published": "2026-10-28T00:00:00.000Z",
      "external_url": "https://www.anthropic.com/research/discovering-vulnerabilities-with-claude",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/linux-kernel-ipv4-tcp-uaf-cve-2026-98432#2026-10-15-b880e87d",
      "url": "https://pwn.watch/i/linux-kernel-ipv4-tcp-uaf-cve-2026-98432#2026-10-15-b880e87d",
      "title": "Linux kernel CVE-2026-98432: TCP use-after-free rated 9.8, Anthropic says its AI built a remote root exploit: Fix (\"ipv4: free inet_opt and ireq_opt after an RCU grace period\") lands upstream and CVE-2026-98432 is published, rated 9.8 by the kernel CNA.",
      "content_text": "Linux kernel CVE-2026-98432: TCP use-after-free rated 9.8, Anthropic says its AI built a remote root exploit: Fix (\"ipv4: free inet_opt and ireq_opt after an RCU grace period\") lands upstream and CVE-2026-98432 is published, rated 9.8 by the kernel CNA.\n\nSource: https://nvd.nist.gov/vuln/detail/CVE-2026-98432",
      "date_published": "2026-10-15T00:00:00.000Z",
      "external_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98432",
      "tags": [
        "critical"
      ]
    }
  ]
}