news
Linux Bugs, Linux Plumbers Conference, and "Friday NV Fight"
-
Linux Magazine ☛ Working Exploit for a Linux Kernel Flaw Made Public
Even before a bug received its CVE identifier or an upstream fix, the local privilege escalation vulnerability exploit found its way into the wild.
-
Bleeping Computer ☛ Critical Linux kernel flaw allows remote root attacks on MPTCP servers
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners.
The flaw, tracked as CVE-2026-98432, also affects ordinary TCP connections, although remote code execution has not been publicly demonstrated on servers without an MPTCP listener.
Multipath TCP (MPTCP) is a TCP feature that lets a single connection use multiple network paths at the same time to improve performance and reliability. It is commonly used in environments where devices have multiple network connections, such as Wi-Fi and cellular networks.
-
Linux Kernel Fragnesia CVE-2026-46300 in CISA KEV: Local Root Flaw Chained With PHP2Shell
On 28 October 2026, the US Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-46300, a Linux kernel flaw known as "Fragnesia", to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. US federal civilian agencies must fix it by 31 October 2026 (CISA KEV catalog; CISA alert). The flaw lets a user who can already run code on a Linux system become root. CISA's entry says it "can be chained with CVE-2026-109618 and CVE-2026-109619 to implant PHP webshells and run commands as root". Those two CVEs are the PHP remote code execution flaws known as PHP2Shell, which we covered in our PHP2Shell advisory.
-
LWN ☛ Remote code execution on Linux systems with multipath TCP
On October 27, LLM provider Anthropic reported on a remotely exploitable use-after-free bug affecting systems with multipath TCP listeners open. The bug works by triggering a response to a retransmitted SYN packet at the same moment that the TCP connection is established in another thread, causing the first thread to access the connection's options structure after the second thread has freed it. The first thread can then disclose kernel memory or cause a buffer overflow, writing an attacker-controlled payload.
-
CSO ☛ Anthropic AI model finds Linux kernel bug that leads to remote root access
-
HowTo Geek ☛ Anthropic's Claude AI found a critical Linux flaw that could give hackers root access
Anthropic’s unreleased Claude AI model has uncovered a critical Linux kernel flaw. And it didn’t just stop at spotting it; it built an attack that could give someone root access, the highest level of control on Linux. The attacker can run commands, change settings, access files, and potentially take over the machine remotely. No clicks, file opening, or password needed. The flaw is tracked as CVE-2026-98432 and scores a critical 9.8 out of 10 in severity.
-
Linux Plumbers Conference (LPC) ☛ Linux Plumbers Conference: The sched_ext Microconference
The sched_ext Microconference was very active this year at Linux Plumbers in Prague. It featured
-
Graphics Stack
-
Mike Blumenkrantz: Friday NV Fight
A Final Frontier
I’ve looked at perf in a lot of places. I looked between the seats, under the couch, in the jar where I usually leave it, but until recently I’d never looked in one place. It was too scary. Too complex.
Seriously, how do you even build mesa on Windows?
-