IA terrifying security vulnerability in the Linux kernel could allow attackers to take complete control of affected servers without knowing a password or tricking anyone into clicking a malicious link. Making matters worse, researchers at Anthropic have demonstrated that artificial intelligence can develop a working exploit capable of turning this flaw into remote root access.
The vulnerability, identified as CVE-2026-98432, carries a critical severity score of 9.8 out of 10. Although fixes have reached several major Linux distributions, Ubuntu remains vulnerable as of November 1, 2026, leaving administrators waiting for Canonical to deliver patched kernels.
The flaw affects the Linux kernel’s IPv4 networking code, specifically the way it handles certain TCP connections. This is particularly concerning because TCP is used by countless internet services, meaning the vulnerable code can be reached before an application even gets the opportunity to authenticate someone.
According to a detailed security analysis published by Atlas, the problem dates back to Linux kernel 4.4. It involves a memory-management mistake known as a use-after-free vulnerability, where the kernel attempts to access memory that has already been released.
Under the right circumstances, specially crafted network traffic can exploit this behavior to corrupt kernel memory, expose sensitive information, or crash a system. A successful remote code execution attack is considerably worse, potentially giving an intruder control over the operating system itself.
Anthropic proves AI can turn a Linux bug into a nightmare
Perhaps the most frightening part of this story comes from Anthropic’s own security research, published October 27. The company revealed that an unreleased internal Claude research model developed a functioning exploit that could remotely execute commands as root on Linux servers running a vulnerable Multipath TCP listener.
Root access is essentially the highest level of privilege available on a Linux system. Someone who obtains it can potentially steal data, install malicious software, interfere with running services, or completely compromise the machine.
Anthropic explained that the attack works in two stages. First, the exploit defeats a security protection designed to make kernel memory addresses difficult to predict, and then it manipulates the vulnerability to execute an attacker-chosen command with root privileges.
In Anthropic’s demonstration, the first stage took approximately 48 minutes, while the second required another five minutes. That is 53 minutes of exploit execution, not the time Claude needed to write the exploit, but it illustrates how an attacker could patiently work toward gaining control of a server.
Even more troubling, unsuccessful attempts do not necessarily crash the target. This allows an attacker to repeatedly try exploiting the vulnerable connection until the necessary conditions occur.
The demonstrated attack required a Multipath TCP listener, so it would be misleading to suggest every unpatched Linux computer can automatically be taken over remotely. However, the underlying flaw exists in ordinary IPv4 TCP processing, and researchers have not ruled out additional methods of exploitation.
Ubuntu users are still waiting for protection
The good news is that the Linux kernel developers have already addressed the underlying problem. Patches are available upstream, and several distributions have incorporated the correction into their supported kernel packages.
Debian 12 and 13 have received fixes, while Red Hat released patched kernels for RHEL 8, 9, and 10 on November 1. Amazon Linux 2 and Amazon Linux 2023 have updates available as well, although individual systems still need to install them and reboot.
Ubuntu is a different story. According to Canonical’s official vulnerability tracker, Ubuntu 22.04 LTS, 24.04 LTS, 26.04 LTS, and 26.10 are still listed as vulnerable, with fixes under development.
That’s a particularly uncomfortable position for Ubuntu, considering its popularity in cloud computing, enterprise environments, and web hosting. While Canonical is working on updates, administrators responsible for internet-facing Ubuntu servers cannot simply assume their systems are protected.
There is another wrinkle involving applications written in Go. The Go Security Team has warned that Go 1.24 and later enable Multipath TCP by default for listening sockets on Linux where the feature is supported and enabled, potentially increasing exposure to the demonstrated attack.
Disabling Multipath TCP can reduce certain risks, but it does not eliminate the underlying kernel vulnerability. The proper solution remains installing a fixed kernel, followed by a reboot to ensure the patched code is actually running.
The bigger threat might be artificial intelligence
There is an important distinction between a security researcher discovering a vulnerability and an AI system developing an exploit capable of weaponizing it. The latter suggests that sophisticated attacks, once requiring extensive specialist knowledge, could eventually become easier and faster to produce.
To be clear, Anthropic conducted this research under controlled conditions using an internal model, and it has not released the Linux exploit publicly. Amazon Web Services also reports that it is unaware of exploitation of this particular vulnerability in the wild, which is reassuring for the moment.
Still, the implications extend far beyond Linux. AI systems are becoming increasingly capable of examining complicated software, discovering weaknesses, and combining techniques that overcome multiple security protections.
There is an obvious benefit to giving security researchers powerful tools that help them discover vulnerabilities before criminals do. The uncomfortable reality, however, is that attackers could eventually gain access to similar capabilities, potentially making the race between discovering security flaws and fixing them much more dangerous.
Linux remains an excellent operating system, and this vulnerability does not somehow make Windows or macOS inherently safer. Every major operating system experiences security problems, but a critical remotely accessible kernel flaw deserves immediate attention regardless of the platform.
For Linux administrators, especially those managing publicly accessible Ubuntu servers, the priority should be checking affected kernels, reviewing network exposure, and applying available updates as soon as possible. For everyone else, this incident offers a disturbing glimpse of a future in which AI does not merely help write software, but also helps find ways to take it apart.
Support independent tech journalism
NERDS.xyz is independently owned and operated. If you enjoy my coverage of Linux, AI, hardware, cybersecurity, and tech culture, consider supporting the site on Ko-fi.
Support NERDS.xyz
