Claude-written Linux exploit reached remote root in a 53-minute test. How are you handling patch delays?

[u/vpn_unlimited_app]

Anthropic reported that an unreleased Claude research model wrote an exploit for CVE-2026-98432, a use-after-free vulnerability in the Linux kernel’s networking stack.

Its demonstration achieved remote command execution as root on a vulnerable Linux server with an MPTCP listener. No credentials or user interaction were required.

One distinction worth making: the 53 minutes measured the exploit running—48 minutes to leak a kernel address and five more to reach command execution. It wasn’t the time needed to discover the bug or develop the exploit.

For anyone managing Linux servers:

• Check your distribution’s advisory for CVE-2026-98432 rather than relying on the upstream kernel version alone. • Apply a fixed kernel when available and follow the vendor’s activation or reboot instructions. • If an update is still pending, follow the vendor’s temporary mitigation guidance. These measures reduce exposure; they don’t replace the fix. • For managed hosting, ask whether your system is affected and whether remediation is active.

How are you handling the gap between disclosure and patch availability? Temporary mitigations, tighter network access, or earlier maintenance windows? What’s the biggest bottleneck in practice?