Linux released fixes for CVE-2026-98432, a critical IPv4 TCP handshake use-after-free that can expose kernel memory, corrupt it, or crash a host; Anthropic reported a Claude-built root exploit requiring a multipath TCP listener. As of October 29, Ubuntu and some Red Hat and Amazon Linux kernels remained unfixed.