Wire · regulatory
Critical Linux kernel vulnerability allows remote code execution
◆ Sectors
◆ Geography
◆ Source
◆ Verified
Fusion42 · 2 November 2026 · Fusion42 review
Security researchers at Anthropic have identified CVE-2026-98432, a critical use-after-free vulnerability in the Linux kernel affecting systems with Multipath TCP listeners, enabling unauthenticated remote code execution as root. The flaw impacts Linux versions 4.4 and later, including Ubuntu and Red Hat Enterprise Linux, and is exploitable within 53 minutes using AI models; Go 1.24 enables Multipath TCP by default, potentially exposing services unknowingly.
This Wire brief sits within Fusion42's coverage of Cybersecurity and Security Infrastructure.
◆ ◆ The Wire takeaway
Go 1.24 ships with Multipath TCP on by default, and that feature now has a public root-level exploit with a 53-minute time-to-code. Any infrastructure vendor or platform shipping Go 1.24 services needs to patch the underlying Linux kernel immediately or face unauthenticated remote takeover; this is a supply-chain jolt for managed cloud platforms and SaaS operators.
◆ Coverage
1 source · 2 Nov 2026
◆ Related on Wire
◆ Topics