Claude wrote a Linux root exploit without a password, and Ubuntu still has no patch

Share

The critical CVE-2026-98432 vulnerability, present in the Linux TCP stack since January 2016, was turned into an exploit capable of obtaining a remote root shell in 53 minutes without credentials or user interaction. Anthropic credits an unpublished internal research model, which reportedly spent 48 minutes leaking a memory address and five minutes overwriting a pointer. Red Hat released patched kernels on November 1, but Ubuntu still listed versions 22.04, 24.04, 26.04 and 26.10 as awaiting a fix. Ubuntu servers reachable over IPv4, including nodes and validators running Go-based software, remain exposed until the patch is installed and the system is rebooted.

Source: Read the original article

Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
Telemac
Telemachttp://cryptoinfo.ch
Passionné de nouvelles technologies, j’explore l’univers de la blockchain et des cryptomonnaies pour partager l’actualité et les innovations du secteur.

Read More

Items