Linux Kernel TCP Flaw Gets AI-Built Root Exploit

Linux kernel TCP flaw CVE-2026-98432: an AI-built remote root exploit targets the IPv4 TCP handshake, patch and reboot, November 2026

A Linux kernel TCP flaw now has a working remote root exploit, and an AI model built it. CVE-2026-98432 (CVSS 9.8) is a use-after-free in the IPv4 TCP handshake that has been in the kernel since version 4.4. As of November 2, Debian and Red Hat ship fixed kernels, Ubuntu still lists its fixes as…

Read More

Spectre v2 Branch Target Reuse vulnerability

A new Spectre v2 Branch Target Reuse vulnerability lets attackers leak a Linux root password hash in minutes, bypassing existing CPU defenses.

Researchers disclosed a new Spectre v2 Branch Target Reuse vulnerability on September 29 that lets an attacker recover a Linux system’s root password hash in minutes, on a fully patched Intel machine, by abusing a gap between how CPUs and just-in-time compilers handle recycled memory. The flaw touches Intel, AMD and Arm processors alike, and…

Read More