x.comthreadThe Hacker News (@TheHackersNews) on X
The Hacker News post reports a Linux kernel TCP flaw in the MPTCP code, rated CVSS 9.8. Anthropic demonstrated an exploit that runs commands as root on servers. Ubuntu and RHEL had no fixes at posting time, while Debian, Oracle and others released patches for some versions. The post gives no CVE ID or technical detail.
TL;DR Post says a CVSS 9.8 Linux kernel MPTCP bug allows root command execution, with Anthropic's demo exploit and Ubuntu and RHEL still unpatched.
Organisations named here
- Red Hat
- Anthropic
- Oracle
- The Hacker News
Technologies named here
- Multipath TCP
- Linux kernel
- Ubuntu
- Red Hat Enterprise Linux
- Debian
- MPTCP
- Oracle Linux
Standards and laws named here
- CVSS
Techniques named here
- Privilege escalation to root via Multipath TCP (MPTCP) flaw
Concepts named here
- CVSS 9.8
Related in Offensive Security
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
github.comrepoYesWeHack Claude Kit
huntress.comwriteupInside an Oracle Database SQL Injection Attack | Huntress
huntress.comwriteup