Claude discovers a high-severity TCP/IP vulnerability that lay dormant in the Linux kernel for eleven years
During systematic testing, Anthropic's Claude discovered a race condition vulnerability in the Linux kernel's TCP/IP stack that had lain dormant for about eleven years and can be exploited remotely to execute code. It has a CVSS score of 9.8 and affects nearly all IPv4 implementations since version 4.4, with distributions including Debian, Red Hat, Suse, and Ubuntu all affected. Greg Kroah-Hartman confirmed the vulnerability is numbered CVE-2026-98432 and has been fixed in 6.12.113, 6.18.56, 7.2.10, and 7.3-rc7, and distributions are rushing to push updated kernels. The only known exploit code currently comes from Anthropic and has not been made public; it targets MPTCP connections, and the actual attack situation remains unclear.
#Safety / alignment#Anthropic#English text is being prepared.