{"rewrite":{"id":"r_f7ca2588fc9adc020bbfd36c","clusterId":"c_718d1c2a6fc7977641437758","slug":"anthropic-demonstrates-root-takeover-attack-on-linux-kernel-flaw-rated-9-8","model":"deepseek-v4-1-flash","headline":"Anthropic Demonstrates Root Takeover Attack on Linux Kernel Flaw Rated 9.8","summary":"Anthropic announced on October 27 that it demonstrated an attack exploiting a Linux kernel vulnerability, CVE-2026-98432, to run commands with administrator privileges without authentication. The flaw is a use-after-free in IPv4 TCP connection processing, rated 9.8 for severity, and exploitable over the network with no user action. The CVE team disclosed it on October 15 and the fix landed in the stable kernel, but Ubuntu's October 29 update lists several versions as under repair or still vulnerable.","whyItMatters":"The demonstration shows that AI-generated attack code can turn a network-reachable kernel use-after-free into unauthenticated root access, so the only real defense left is how quickly administrators apply their distribution's fix.","webCardHtml":"\u003cp\u003eThe attack targeted an MPTCP listening server, which handles TCP connections across multiple network paths, and the exploit code was created by AI. The flaw sits in IPv4 communication processing and is reachable over the network without authentication or any action from the user. The CVE team disclosed CVE-2026-98432 on October 15, and the fix went into the stable kernel. That leaves the update lag at the distribution level: Ubuntu\u0026#39;s October 29 advisory lists multiple versions as under repair or still vulnerable, and administrators are told to check the fix status published by the Linux distribution they run and apply updates.\u003c/p\u003e","blueskyPost":"Ubuntu's October 29 advisory lists versions still under repair for CVE-2026-98432. Anthropic's root takeover is public; the patch status across distributions is the part that decides exposure.","twitterPost":"Ubuntu's October 29 update lists versions still vulnerable to CVE-2026-98432. The fix landing in stable does not mean every distro shipped it.","threadsPost":"Anthropic demonstrated root access through CVE-2026-98432 without authentication. The fix reached the stable kernel, but Ubuntu's October 29 advisory lists several versions still under repair or vulnerable. Patch adoption across distributions, not the exploit demo, decides who stays exposed.","newsletterBlurb":"Anthropic showed an attack that used AI-written code to take root on a Linux server through CVE-2026-98432, a use-after-free in IPv4 TCP processing rated 9.8. The fix is in the stable kernel, but distributions lag: Ubuntu's October 29 update lists several versions as under repair or still vulnerable. Administrators should check their distribution's advisory and patch.","attributionJson":"[{\"source\":\"ASCII.jp\",\"url\":\"https://ascii.jp/elem/000/004/447/4447103/?rss\",\"title\":\"Linux vulnerability rated 9.8 severity allows root privilege takeover without authentication; Anthropic's AI demonstrates attack\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":5311,"outputTokens":783,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1793324966,"createdAt":"2026-10-30T01:44:30.000Z","publishedAt":"2026-10-30T01:48:25.000Z","updatedAt":"2026-10-30T01:48:25.000Z"},"cluster":{"id":"c_718d1c2a6fc7977641437758","canonicalTitle":"Linuxに深刻度9.8の脆弱性、認証なしでroot権限奪取　AnthropicのAIが攻撃を実証","representativeArticleId":"a_88e661105925c7383c486cc3","sourceCount":1,"writtenSourceCount":1,"writeAttempts":0,"isSolo":true,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[],\"studios\":[],\"people\":[],\"type\":\"news\",\"domain\":\"other\",\"is_roundup\":false}","contentType":"news","status":"published","firstSeenAt":"2026-10-30T01:00:00.000Z","lastSeenAt":"2026-10-30T01:00:00.000Z","updatedAt":"2026-10-30T01:48:25.000Z"},"attribution":[{"source":"ASCII.jp","url":"https://ascii.jp/elem/000/004/447/4447103/?rss","title":"Linuxに深刻度9.8の脆弱性、認証なしでroot権限奪取　AnthropicのAIが攻撃を実証"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":[],"studios":[],"people":[],"type":"news","domain":"other","is_roundup":false},"keyFacts":["Anthropic announced on October 27 that it demonstrated an attack exploiting Linux kernel vulnerability CVE-2026-98432 to execute commands with administrator privileges without authentication.","CVE-2026-98432 is rated 9.8 out of 10 for severity and is a use-after-free flaw in the Linux kernel's IPv4 communication processing.","The attack was carried out against an MPTCP listening server using attack code created by AI.","The CVE team disclosed the vulnerability on October 15, and the fix was incorporated into the stable kernel.","Ubuntu's October 29 update information lists multiple versions as under repair or in a vulnerable state."],"pageLinks":{"healthSlugs":[],"storySlugs":[],"entities":[],"stories":[],"entitiesOk":true,"storiesOk":true}}