Severe Linux TCP Flaw Enables Remote Root Access Verified by Anthropic's Claude Model
Frontier AI models · AI coding
A race-condition flaw (CVE-2026-98432) in Linux IPv4 TCP handling allows remote root execution via use-after-free. Anthropic used an unreleased Claude research model to find and verify the flaw. Upstream is patched, but distro updates vary.
Vulnerability reports and Anthropic show that IPv4 TCP handling in the Linux kernel contains a race-condition bug causing memory use-after-free. Attackers can bypass KASLR to execute root commands on MPTCP servers without crashing the system on failed attempts. Anthropic verified this using an unreleased Claude research model. Upstream kernels have delayed memory freeing to fix the issue, though downstream distro patch schedules vary.
Key takeaways
- Anthropic used an unreleased Claude research model to find the flaw and verified multi-stage root command execution in an MPTCP test setup.
- Upstream Linux kernels updated the memory release mechanism, though patches across Debian, Ubuntu, Red Hat, and other distros remain uneven.
Source：iThome Read the original ↗
Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.