Critical Linux kernel flaw CVE-2026-98432 lets unauthenticated remote root attacks
Red Hat, Debian, SUSE, Oracle and Amazon Linux released fixes for CVE-2026-98432, which has a CVSS score of 9.8. Ubuntu has not yet patched.
A critical vulnerability in the Linux kernel, tracked as CVE-2026-98432, allows unauthenticated remote attacks and has existed since Linux 4.4, according to security firm Atlas Industries. The flaw carries a CVSS score of 9.8, the highest severity rating.
Red Hat released fixed kernels for RHEL 8, 9 and 10 on November 1. Debian, SUSE, Oracle and Amazon Linux also distributed patches. Ubuntu has not yet released a patch.
Anthropic said its model Claude produced attack code that gains root privileges through this bug. Failed attempts do not crash the system, allowing repeated retries, the company said.
Fixed kernels require a reboot to take effect. For systems that cannot be patched immediately, Atlas Industries advised blocking IPv4 TCP packets with options and disabling unused multipath TCP.
Quick answers
What is CVE-2026-98432?
It is a critical Linux kernel vulnerability with a CVSS score of 9.8 that allows unauthenticated remote attacks and has existed since Linux 4.4.
Which Linux distributions have patched CVE-2026-98432?
Red Hat released fixed kernels for RHEL 8, 9 and 10 on November 1, and Debian, SUSE, Oracle and Amazon Linux also distributed patches. Ubuntu has not yet released a patch.
What should I do if I can't patch immediately?
Atlas Industries advised blocking IPv4 TCP packets with options and disabling unused multipath TCP. Fixed kernels require a reboot.