OpenAI announced GPT-6 Cyber, an AI model built for vulnerability research, which uncovered 81 unknown high-severity Firefox flaws and helped patch many of them. In Linux kernel testing, the model flagged 2,308 potential issues, reproduced 1,724 of them, and built privilege-escalation exploits for 948 distinct bugs. OpenAI rated the model's cybersecurity capability as 'Critical,' up from 'High' for its predecessor, and restricted access to select customers in its Daybreak Red program.
bleepingcomputer.com
· 2026-11-06
A Hacker News poster flagged that Ubuntu has not yet shipped a fix for CVE-2026-98432, a vulnerability rated 9.8 in severity, nearly a week after disclosure. Ubuntu's security tracker still lists the issue as 'work in progress,' though it now includes a suggested mitigation. The poster says they have been relying on manual mitigations in the meantime.
news.ycombinator.com
· 2026-11-06
OpenAI reportedly used an AI-based analysis tool to scan the Linux kernel and identified 948 possible local privilege escalation vulnerabilities, according to Phoronix founder Michael Larabel. The findings point to weaknesses that could let a local user gain elevated system access if left unaddressed.
phoronix.com
· 2026-11-06
Gregory Kurtzer, co-founder of CentOS and Rocky Linux, says he built a new operating system kernel called Ginux in 11 days, with an AI coding agent writing nearly all the code. Though written from scratch in Rust rather than forked from Linux, Ginux shares Linux's application binary interface and can already boot Rocky Linux 10. The kernel currently fully supports only 82 of Linux's 375 x86-64 system calls, with 245 partially working and 48 intentionally blocked.
techspot.com
· 2026-11-03
A critical remote code execution vulnerability rated 9.8 on the CVSS scale, tracked as CVE-2026-98432, remains unpatched in Ubuntu's 22.04, 24.04, and 26.04 LTS kernels almost three weeks after disclosure. Canonical has not released updated kernel packages or given a timeline for when fixes will ship.
freenode.net
· 2026-11-02
A critical remote-code-execution bug in the Linux kernel's TCP stack, CVE-2026-98432 (CVSS 9.8), has existed since 2016 and affects nearly all Linux servers. Debian shipped a patch on October 16, but as of November 2 every supported Ubuntu release, including LTS versions, is still listed as vulnerable, more than two weeks later and days after a working root exploit was reportedly demonstrated.
chalmovsky.com
· 2026-11-02
Gregory Kurtzer, founder of Rocky Linux and CIQ, has built Ginux, a new Rust-based x86-64 kernel written largely by an AI agent in 11 days. Unlike Rocky Linux, Ginux is not a fork of Linux but an independent kernel with its own memory management, scheduler and filesystems, though it implements the Linux ABI so unmodified Linux binaries can run on it. The project currently only works inside a QEMU virtual machine, lacking GPU, NVMe or physical hardware support and any independent security audit.
tech.slashdot.org
· 2026-11-02
Phoronix reports the Linux 7.4 merge window logged 19,671 commits since version 7.3, the highest tally in the kernel's history. The kernel source tree now totals over 41.6 million lines, with roughly half a million lines of actual code added during this window alone, according to cloc-based measurements.
linux.slashdot.org
· 2026-11-01
A use-after-free bug in Linux's IPv4 TCP handshake, present since kernel 4.4, has been patched upstream with fixed releases spanning 5.10 through 7.3, but Ubuntu and RHEL have not yet shipped fixes as of October 31. Anthropic says its Claude model produced a working proof-of-concept that gains root access with no credentials on servers running multipath TCP listeners, and Go's security team notes Go programs enable such listeners by default.
atlasum.net
· 2026-10-31
Anthropic security researchers created a working exploit for CVE-2026-98432, a use-after-free bug in the Linux kernel's IPv4 TCP code rated 9.8/10 in severity. The flaw lets unauthenticated attackers achieve remote root code execution on servers running Multipath TCP listeners, and it also affects ordinary TCP connections across kernels back to version 4.4, including Ubuntu, RHEL and Rocky Linux, though RCE on non-MPTCP servers hasn't been publicly shown.
bleepingcomputer.com
· 2026-10-30
A use-after-free bug has been identified in the Linux kernel's IPv4 TCP handshake code, where a race condition between processors can leave a stale pointer to a freed IP options object. The CVE record rates it 9.8 on CVSS 3.1 as a worst-case network-reachable flaw, while Red Hat scores it 5.9 for its supported products, and Anthropic's Frontier Red Team separately demonstrated a working remote root exploit in a lab setup using a Multipath TCP listener.
penligent.ai
· 2026-10-30
CISA added CVE-2026-46300, a Linux kernel privilege-escalation bug dubbed Fragnesia, to its Known Exploited Vulnerabilities catalog and ordered federal agencies to patch by Saturday. The flaw, found in the XFRM ESP-in-TCP subsystem, grants root access and can reportedly be chained with two critical PHP vulnerabilities known as PHP2Shell to install webshells on unpatched systems.
bleepingcomputer.com
· 2026-10-29
GoKawiil