Linux kernel TCP flaw CVE-2026-98432 allows remote root on MPTCP servers
Anthropic says an unreleased Claude model built a root exploit in about 53 minutes; no in-the-wild attacks are confirmed.
74
Product
Ubuntu
- Mentions · 7d3
- Mentions · 30d31
- All mentions80
- First seenSep 7, 2026
- Last mentioned11h ago
Timeline
80 articles · newest firstClaude research model wrote a root exploit for Linux CVE-2026-98432
Anthropic calls it a lab test, not a real incident; upstream kernels are patched but several Ubuntu releases remain vulnerable.
76
Canonical restarts Ubuntu Core Desktop as a future immutable default
Daily images are expected in the Ubuntu 27.04 cycle, and the desktop can run only snap-packaged software.
32
USN-8922-2: Linux kernel (Azure) vulnerabilities
Ubuntu patched multiple Azure Linux kernel flaws that could let an attacker compromise the system.
28
USN-8883-2: Go vulnerability
Ubuntu fixes a Go 1.23 x/net/idna Punycode flaw that could bypass hostname access controls.
32
USN-8929-1: Bind vulnerabilities
Ubuntu patched Bind flaws that could cause denial of service or DNS cache poisoning.
34
USN-8925-1: YAML-LibYAML vulnerabilities
Ubuntu patched YAML-LibYAML flaws that could delete files or run code on 16.04 and 18.04 LTS.
28
Massive DDoS Attack Disrupts Ubuntu’s Canonical Websites and Security APIs
A DDoS attack disrupted Canonical’s Ubuntu websites and security APIs for just over four hours.
58
USN-8915-1: FFmpeg vulnerabilities
Ubuntu's USN-8915-1 fixes FFmpeg flaws, including possible code execution and several denial-of-service bugs.
40
Canonical Hit by Second DDoS Attack in 2026, Public Websites Disrupted
Canonical's public websites were disrupted for over four hours by its second DDoS attack of 2026.
64
USN-8913-1: libx11 vulnerabilities
Ubuntu patched libX11 flaws that let a malicious X server crash clients or possibly run code.
36
USN-8912-1: Perl DBI module vulnerabilities
Ubuntu's USN-8912-1 patches Perl DBI flaws that may allow code execution or denial of service.
34
USN-8903-2: Linux kernel vulnerabilities
Ubuntu patched multiple Linux kernel flaws that could let an attacker compromise the system.
34
USN-8905-2: Linux kernel (GCP) vulnerabilities
Ubuntu patched GCP Linux kernel vulnerabilities that could allow an attacker to compromise the system.
30
USN-8908-1: BlueZ vulnerabilities
Ubuntu patched BlueZ flaws, including an A2DP stack overflow and an out-of-bounds memory read.
40
USN-8910-1: libxml2 vulnerabilities
Ubuntu patched libxml2 flaws, including a heap overflow that could crash the library or allow code execution.
44
USN-8896-1: GStreamer Ugly Plugins vulnerabilities
Ubuntu patches GStreamer Ugly Plugins flaws that could run code from crafted RealMedia or ASF files.
32
USN-8900-1: Go Networking vulnerabilities
Ubuntu patches Go networking flaws that can hang HTTP/2 connections or exhaust resources via HPACK.
30
USN-8897-1: lxml vulnerabilities
Ubuntu fixes lxml flaws that can bypass URL sanitization for XSS and leak local files via untrusted XML.
34
USN-8895-1: Sudo vulnerability
Ubuntu says Sudo time rules can be bypassed via TZ when timestamps omit a timezone.
32
LSN-0122-1: Kernel Live Patch Security Notice
Ubuntu live patch LSN-0122-1 fixes Linux kernel use-after-free and NULL-dereference bugs in DLM, brcmfmac, and padata.
32
USN-8890-1: libsoup vulnerabilities
Ubuntu fixed libsoup flaws that could cause denial of service, leak proxy data, or bypass security checks.
36
USN-8884-1: U-Boot vulnerabilities
Ubuntu patches U-Boot flaws where crafted ZFS or ext4 metadata can cause code execution or denial of service.
34
USN-8889-1: Linux kernel (OEM) vulnerabilities
Ubuntu patched OEM Linux kernel flaws, including AMD SEV-SNP issue CVE-2023-20585.
32
USN-8888-1: Linux kernel (Azure) vulnerabilities
Ubuntu’s USN-8888-1 patches Azure Linux kernel flaws, including AMD SEV-SNP bug CVE-2023-20585.
36
USN-8885-1: FluidSynth vulnerabilities
Ubuntu patched FluidSynth flaws that could crash the synthesizer or allow arbitrary code execution.
34
USN-8881-1: FreeType vulnerability
Ubuntu fixed a FreeType CID font-loader flaw that can exhaust memory and CPU, causing denial of service.
34
USN-8876-1: Linux kernel (Azure CVM) vulnerabilities
Ubuntu patched Azure CVM Linux kernel flaws, including local denial-of-service bug CVE-2022-3114.
34
USN-8872-1: libxmltok vulnerabilities
Ubuntu fixed libxmltok integer flaws CVE-2026-56404 and CVE-2026-56405 that can crash processes via crafted files.
32
USN-8865-1: EDK II vulnerabilities
Ubuntu patched EDK II OpenSSL flaws that could cause denial of service, including a heap overflow.
34
USN-8863-1: GStreamer Good Plugins vulnerabilities
Ubuntu patched GStreamer Good Plugins flaws that could leak data or crash via crafted media.
30
USN-8859-1: ImageMagick vulnerabilities
Ubuntu patches ImageMagick flaws that could let attackers cause denial of service or leak information.
26
USN-8856-1: Kdenlive, MLT vulnerability
Ubuntu’s USN-8856-1 fixes a Kdenlive flaw letting malicious project files run commands via MLT.
22
USN-8845-1: GVfs vulnerabilities
Ubuntu warns of two GVfs flaws: malicious SFTP input may yield code execution, and a local bug can grant root.
48
USN-8854-1: OpenStack Keystone vulnerabilities
Ubuntu patches OpenStack Keystone flaws that can extend delegated tokens and leak role data.
34
USN-8849-1: Linux kernel (NVIDIA Tegra) vulnerabilities
Ubuntu patched NVIDIA Tegra Linux kernel flaws, including an Arm TLB issue that may allow local privilege escalation.
36
USN-8818-4: Linux kernel vulnerabilities
Ubuntu patches Linux kernel flaws, including Arm TLB bug CVE-2025-10263 that may allow local privilege escalation.
34
USN-8730-7: Linux kernel (FIPS) vulnerability
Ubuntu FIPS kernel notice USN-8730-7 fixes IPv6 and Netfilter flaws without listing a CVE.
22
USN-8817-2: Linux kernel (AWS FIPS) vulnerabilities
Ubuntu patched AWS FIPS Linux kernel flaws, including an Arm TLB bug that may enable local privilege escalation.
34
USN-8819-4: Linux kernel (FIPS) vulnerabilities
Ubuntu FIPS kernel update fixes NFS, IPv6, and Netfilter flaws CVE-2025-38724, CVE-2026-53131, and CVE-2026-53221.
30
Related CVEs
by mentions- CVE-2025-10263<1%9.1Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 &…
- CVE-2026-53221<1%9.8Linux kernel: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
- CVE-2026-53131<1%9.4Linux kernel: netfilter: require Ethernet MAC header before using eth_hdr() `ip6t_eui64`, `xt_mac`, the `bitmap:ip,mac`…
- CVE-2025-38724<1%7.8Linux kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that…
- CVE-2026-98432<1%9.8Use-after-free in Linux kernel IPv4 TCP options
- CVE-2023-20585<1%5.6Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds…
- Type-confusion crash in Perl DBI before 1.654
- CVE-2026-63387<1%7.0Libevent: Libevent has an off-by-one stack buffer overflow in evdns.c when dnsname_to_labels formats a name-bearing DNS record at the end…
- CVE-2026-56404<1%6.9libexpat before 2.8.2 has an integer overflow in addBinding
- CVE-2026-75032<1%6.3BlueZ: Insufficient validation of packet length fields in GetFolderItems responses within the Audio/Video Remote Control Profile (AVRCP)…
Appears with
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.