GoKawiilAnthropic researchers build exploit for critical Linux kernel MPTCP flaw CVE-2026-98432
Anthropic security researchers created a working exploit for CVE-2026-98432, a use-after-free bug in the Linux kernel's IPv4 TCP code rated 9.8/10 in severity. The flaw lets unauthenticated attackers achieve remote root code execution on servers running Multipath TCP listeners, and it also affects ordinary TCP connections across kernels back to version 4.4, including Ubuntu, RHEL and Rocky Linux, though RCE on non-MPTCP servers hasn't been publicly shown.