Latest
  1. Accenture contractor reportedly linked Pentagon system to personal Claude Code account
  2. U.S. investigated possible Chinese spy plot aimed at Nvidia CEO, New York Times reports
  3. House progressives file a resolution against bailing out AI firms
  4. Canada to take an equity stake of up to C$1.6 billion in Cohere
  5. Microsoft offers voluntary buyouts to around 60,000 employees
  6. Linux kernel TCP flaw rated 9.8 CVSS affects Ubuntu and Red Hat
  7. China’s upgraded Jiaolong submersible carries AI systems after 7,000-metre trials
  8. Enzi Prize puts $10m towards cutting frontier AI costs tenfold in Africa

Latest / Chips, compute and energy

IncidentComputeMediaInternationalConfirmed

Linux kernel TCP flaw rated 9.8 CVSS affects Ubuntu and Red Hat

See how this story connects

Source: The Hacker News

CVE-2026-98432 is a race condition in the code that sets up new IPv4 TCP connections in the Linux kernel. The kernel’s CVE team rates it 9.8 out of 10 on CVSS, and Red Hat, Amazon, Oracle and SUSE score it between 5.9 and 8.1. Anthropic said on 27 October that its AI model wrote an exploit that lets a remote attacker with no credentials run commands as root on Linux servers with a multipath TCP listener. As of 29 October, Ubuntu and Red Hat Enterprise Linux have not released a fixed kernel. Debian, Oracle Linux, SUSE and Amazon Linux have shipped fixed packages, at least for some of their kernels.

Why it matters

As of 29 October, Ubuntu and RHEL users have no fixed kernel to install, and neither Red Hat nor Ubuntu gives a release date.

When
29 Oct 2026
ID
WTA-N-2026-0542
Who
Anthropic, Ubuntu, Red Hat, Debian, Oracle, SUSE, Amazon, Linux kernel team; Xinyang Ge
System
Linux kernel IPv4 TCP connection setup (CVE-2026-98432)
Operator
Linux distributions
Type
remote root on servers with a multipath TCP listener; exploit written by Anthropic’s AI model
Status
Debian, Oracle Linux, SUSE and Amazon Linux shipped fixes; Ubuntu and Red Hat had none on 29 October; disclosed by Anthropic; the kernel’s CVE team · Incident ledger

Summary written with AI by wheresthe.ai, from The Hacker News. Checked against the source on 29 Oct 2026.

Read the original at The Hacker News

Source copy: saved on 29 Oct 2026 to check this story and not republished, because the text belongs to its publisher. Also held by the Internet Archive.

Cite this story

WTA-N-2026-0542: “Linux kernel TCP flaw rated 9.8 CVSS affects Ubuntu and Red Hat.” wheresthe.ai, 29 Oct 2026. https://wheresthe.ai/d/intl-linux-kernel-tcp-flaw-rated-9-8-cvss-affects-ubuntu-and-2026-10/ (source: The Hacker News).

Spotted an error? Email [email protected].