Critical Linux Kernel TCP Vulnerability CVE-2026-98432 Exposed with 9.8 CVSS Score

A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The Linux kernel's own CVE team rates it 9.8 out of 10 on the CVSS scale.

Anthropic said on October 27 that its AI model wrote an exploit that uses the flaw to let a remote attacker with no credentials run commands as root on Linux servers. The vulnerability resides in the Linux kernel's TCP implementation and was disclosed publicly on October 27, 2026. Media coverage was published on October 29, 2026.

The vulnerability allows remote code execution as root without authentication on Linux servers. The 9.8 CVSS score indicates critical severity. Affected systems are vulnerable to network-based attacks where attackers can gain full root compromise without prior access or credentials.

Anthropic reported on October 27, 2026 that its AI model developed an exploit leveraging CVE-2026-98432. The exploit allows remote attackers with no credentials to execute commands as root on affected Linux servers. The status of active in-the-wild exploitation remains unconfirmed.

No specific patch information was provided in the source. Standard kernel update procedures apply. Users should update to the latest kernel versions from their distribution maintainers. Ubuntu and Red Hat Enterprise Linux users should apply security updates through their respective package managers. The Linux kernel CVE team rated the severity at 9.8/10, indicating urgent patching is required.