Linux kernel TCP flaw CVE-2026-98432 allows remote root on MPTCP servers
Anthropic says an unreleased Claude model built a root exploit in about 53 minutes; no in-the-wild attacks are confirmed.
74
Vendor
Debian
- Mentions · 7d3
- Mentions · 30d5
- All mentions14
- First seenAug 31, 2026
- Last mentioned5h ago
Timeline
14 articles · newest firstLinux TCP use-after-free scored 9.8; Ubuntu and RHEL unfixed
Anthropic says Claude built a remote root exploit via MPTCP, a link absent from the CVE and fix.
76
16-year-old EDK II PXE buffer overflow runs code before Secure Boot
CVE-2026-97631 lets an adjacent-network attacker hang or hijack network boots on servers, and no stable EDK II release ships the fix yet.
70
Debian's latest kernel security update has 1,313 reasons to patch
Debian kernel advisory DSA-6528-1 lists 1,313 CVEs, reflecting cautious assignment and AI-assisted bug hunting.
46
Several vulnerabilities have been discovered in the Linux kernel
Debian published DSA-6528-1, a Linux kernel update covering hundreds of CVEs.
35
Major rsync upgrade in Debian because of 33 CVEs
Debian bumps rsync to 3.5.0 on Trixie to fix 33 CVEs, with breaking security changes.
68
"several" CVEs in latest Debian linux security advisory DSA 6528-1
Debian DSA 6528-1 lists 1,313 Linux kernel CVEs that may enable privilege escalation, crashes, or leaks.
28
AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum
Hacktron researchers used Claude Opus 5 to build a libheif exploit in hours, hijacking OpenAI staff accounts via a Discourse forum shared-SSO flaw.
72
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
Hacktron researchers used Claude Opus 5 to chain a libheif flaw and OpenAI SSO weakness, taking over staff ChatGPT and Codex accounts; OpenAI paid $6,500.
62
Researchers Use Claude Opus 5 to Hack OpenAI Forum and Reach Internal Repositories
Researchers used Claude Opus 5 to build a libheif exploit that compromised OpenAI's forum, hijacked employee ChatGPT/Codex accounts, and reached the internal monorepo.
70
A heap overflow and SSO misconfiguration to compromise OpenAI internal repos
Hacktron researchers chained a libheif heap overflow in Discourse with an OpenAI SSO flaw to take over employee ChatGPT/Codex accounts and access internal repositories.
78
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
NLnet Labs patched a critical heap overflow (CVE-2026-81642) in Unbound's DNSSEC validator that a malicious DNS zone can trigger for possible RCE.
68
CERN Renounces RHEL in Favor of Debian
CERN will move its 2,200-machine accelerator-control fleet from Red Hat-derived distributions to Debian 13, completing the transition by Q4 2026.
8
Debian developers rejected an LLM ban and left disclosure voluntary
Debian developers voted to encourage voluntary disclosure of AI assistance in contributions rather than banning or mandating labeling of LLM-generated code.
30
Related CVEs
by mentions- CVE-2026-98432<1%9.8Use-after-free in Linux kernel IPv4 TCP options
- CVE-2026-32882<1%7.1libheif is a HEIF and AVIF file format decoder and encoder
- Heap Buffer Overflow in NLnet Labs Unbound DNS Resolver May Lead to RCE
- CVE-2026-64058<1%7.8Linux kernel: netfs
- CVE-2025-39925<1%5.5Linux kernel: can: j1939: implement NETDEV_UNREGISTER notification handler
- CVE-2024-58095<1%5.5Linux kernel: jfs: add check read-only before txBeginAnon() call Added a read-only check before calling `txBeginAnon` in…
- CVE-2025-38621<1%5.5Linux kernel: md: make rdev_addable usable for rcu mode Our testcase trigger panic
- CVE-2025-38203<1%5.5Linux kernel: jfs
- CVE-2026-53313<1%5.5Linux kernel: drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths
- CVE-2025-22127<1%5.5Linux kernel: f2fs: fix potential deadloop in prepare_compress_overwrite() Jan Prusakowski reported a kernel hang issue as…
Appears with
- Debianorganization · 6
- Linux kernelproduct · 5
- Claude Opus 4.8ai model · 4
- Hacktronorganization · 4
- Anthropicorganization · 4
- Red Hatvendor · 4
- Claude Opus 5ai model · 4
- Anthropicvendor · 4
- Discoursevendor · 4
- OpenAIvictim · 4
- Claude Opus 4.8product · 3
- Claude Opus 5product · 3
- ChatGPTproduct · 3
- SUSEvendor · 3
- Codexproduct · 3
- OpenAIvendor · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.