The critical CVE-2026-98432 vulnerability, present in the Linux TCP stack since January 2016, was turned into an exploit capable of obtaining a remote root shell in 53 minutes without credentials or user interaction. Anthropic credits an unpublished internal research model, which reportedly spent 48 minutes leaking a memory address and five minutes overwriting a pointer. Red Hat released patched kernels on November 1, but Ubuntu still listed versions 22.04, 24.04, 26.04 and 26.10 as awaiting a fix. Ubuntu servers reachable over IPv4, including nodes and validators running Go-based software, remain exposed until the patch is installed and the system is rebooted.
Source: Read the original article


