Signals · Rising · first seen October 29, 2026
Critical Linux kernel flaw can let an attacker take over servers that use Multipath TCP
Anthropic disclosed that an unreleased Claude research model built a working exploit for CVE-2026-98432, a Linux kernel flaw rated 9.8 out of 10 that lets an attacker with no login run commands as root on servers with a Multipath TCP listener, CSO Online reported on Oct. 30. Fixed kernels are out for several Linux branches and some distributions, but Ubuntu and Red Hat Enterprise Linux had not shipped them as of Oct. 30. Multipath TCP is opt-in.
Why it matters to a business like yours
Your website, booking system or file server may run on Linux even if nobody in the office ever touches it, and the fix comes from whoever hosts it. Ask your IT partner or web host whether any of your servers use Multipath TCP and when the patched kernel goes in.
Sources
- Anthropic AI model finds Linux kernel bug that leads to remote root access (CSO Online, October 30, 2026)
History
- November 2, 2026: Rising