Claude writes working root exploit for critical Linux TCP use-after-free, CVE-2026-98432
AIandDesign · x · 2026-11-01
Linux kernels patched CVE-2026-98432 in October: a remote, unauthenticated use-after-free in the IPv4 TCP handshake, scored CVSS 9.8 Critical, present since Linux 4.4. The upstream fix is four lines across releases 5.10.272 through 7.3.
- The bug was found by an Anthropic researcher; Anthropic says Claude wrote a working proof-of-concept exploit that runs commands as root on servers with multipath TCP listeners, which Go programs open by default.
- As of Oct 31, Ubuntu still marks its kernels Vulnerable on every release, and Red Hat lists RHEL 8/9/10 as affected with no fix.
- The poster uses this to rebut the "AI slop code" narrative: the real slop is legacy code written by humans who look down on AI-assisted development.
Related event: Critical Linux TCP Flaw CVE-2026-98432 Exploited via Claude-Written PoC(2 posts)→
More from Fun
- Agents playtested his game Slop Eisley, driving the 0.6.77 pathfinding fix — jasonkneen · 2026-11-02
- Blogger suspects companies ship bad AI integrations on purpose to make people hate AI — yunta_tsai · 2026-11-02
- Dreamlike AI-generated star-trail vortex images go viral on X — Kyrannio · 2026-11-02
- Someone nailed an uncanny Dario Amodei Halloween costume — kyliebytes · 2026-11-02
- Flexing 256GB of RAM at Sam Altman: two machines, 126GB+128GB barely used — PrasoonPratham · 2026-11-02
- SF Halloween costume turns a hardcoded API key into a wearable diff banner — yenkel · 2026-11-02