CVE-2026-98432: Linux Kernel TCP Flaw Exploitable via AI-Authored Code

# CVE-2026-98432: Linux Kernel TCP Flaw Exploitable via AI-Authored Code

https://gcdradar.vercel.app/incidents/cve-2026-98432-linux-kernel-tcp-flaw-exploitable-via-ai-auth · AIR-2026-1641 · closed 2026-11-12

- Lane: Research
- Severity: 1 (Research / proof of concept): Demonstrated research exploit via AI with a critical CVSS score of 9.8.
- Fix status: Fix status unknown
- First reported: 2026-10-29 (happened 2026-10-27)
- AI role: AI-enabled attack
- Products: Linux Kernel
- CVE ids: CVE-2026-98432
- CVSS: 9.8

## Summary

A critical TCP vulnerability in the Linux kernel is rated 9.8 by the vendor. Anthropic disclosed that its AI model wrote a working exploit enabling unauthenticated remote code execution as root.

## What to do

Apply available kernel updates for Red Hat Enterprise Linux immediately.

## Affected and fixed versions

- Affected: Linux Kernel TCP

## Latest updates

- 2026-11-03: Red Hat releases official patches for the critical Linux kernel TCP remote code execution vulnerability. (https://thehackernews.com/2026/11/red-hat-patches-98-rated-linux-tcp-rce.html)
- 2026-10-29: Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions (https://thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html)

## Sources

- 2026-10-29 The Hacker News: Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions https://thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html
- 2026-10-30 BleepingComputer: Critical Linux kernel flaw allows remote root attacks on MPTCP servers https://bleepingcomputer.com/news/security/critical-linux-kernel-flaw-allows-remote-root-attacks-on-mptcp-servers
- 2026-11-02 Fortinet: Linux kernel RCE CVE-2026-98432 https://fortiguard.fortinet.com/psirt/FG-IR-26-188
- 2026-11-03 The Hacker News: Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing https://thehackernews.com/2026/11/red-hat-patches-98-rated-linux-tcp-rce.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.