Critical Linux kernel MPTCP flaw enables remote root attacks

· Cybersecurity

Researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners. The TCP-code flaw, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux and other distributions, and the kernel's own CVE team rates it 9.8 out of 10 on the CVSS scale. Anthropic said on October 27 that its AI model wrote the exploit. The case adds to a growing set of AI-assisted vulnerability discoveries that leave administrators racing to patch widely deployed open-source infrastructure.

Why it matters：A remotely exploitable root flaw in core Linux networking affects a huge installed base, and its AI-authored exploit signals that vulnerability discovery cycles are accelerating.

Key points

  • Tracked as CVE-2026-98432 with a CVSS score of 9.8
  • Ubuntu and Red Hat Enterprise Linux are among affected distributions
  • Anthropic said an AI model wrote the exploit

Sources (original reporting)

More stories from this day