conv.

All stories
SecurityQuiet 13d · day 13

Unreleased Claude model weaponizes Linux kernel bug into root exploit

An experimental Anthropic AI turned a known vulnerability into a working remote exploit; Ubuntu and Red Hat lack patches while Debian already shipped a fix.

newest coverage 12d agosummary written 12d ago2 pieces371 likes & upvotes24 comments Hacker NewsX

What to know

  • An experimental Claude model discovered how to turn a known Linux kernel vulnerability into a working remote root exploit requiring no authentication.
  • Debian patched the bug on October 16; Ubuntu and Red Hat remain unpatched as of the disclosure.
  • The exploit targets servers with multipath TCP listeners and allows arbitrary command execution as root.

Anthropic AI developerDebian Linux distributionUbuntu / Red Hat Linux distributions

Unreleased Claude model weaponizes Linux kernel bug into root exploit
x.com

How it unfolded 1 development · click the chart to see its coverage posts

Peak 2 pieces in 3h at Oct 30, 3 AM; 2 pieces over 13 days (2 posts) Oct 30, 3 AM — 2 pieces · 2 posts — X 1, Hacker News 1Oct 30, 6 AM — quietOct 30, 9 AM — quietOct 30, 12 PM — quietOct 30, 3 PM — quietOct 30, 6 PM — quietOct 30, 9 PM — quietOct 31, 12 AM — quietOct 31, 3 AM — quietOct 31, 6 AM — quietOct 31, 9 AM — quietOct 31, 12 PM — quietOct 31, 3 PM — quietOct 31, 6 PM — quietOct 31, 9 PM — quietNov 1, 12 AM — quietNov 1, 2 AM — quietNov 1, 5 AM — quietNov 1, 8 AM — quietNov 1, 11 AM — quietNov 1, 2 PM — quietNov 1, 5 PM — quietNov 1, 8 PM — quietNov 1, 11 PM — quietNov 2, 2 AM — quietNov 2, 5 AM — quietNov 2, 8 AM — quietNov 2, 11 AM — quietNov 2, 2 PM — quietNov 2, 5 PM — quietNov 2, 8 PM — quietNov 2, 11 PM — quietNov 3, 2 AM — quietNov 3, 5 AM — quietNov 3, 8 AM — quietNov 3, 11 AM — quietNov 3, 2 PM — quietNov 3, 5 PM — quietNov 3, 8 PM — quietNov 3, 11 PM — quietNov 4, 2 AM — quietNov 4, 5 AM — quietNov 4, 8 AM — quietNov 4, 11 AM — quietNov 4, 2 PM — quietNov 4, 5 PM — quietNov 4, 8 PM — quietNov 4, 11 PM — quietNov 5, 2 AM — quietNov 5, 5 AM — quietNov 5, 8 AM — quietNov 5, 11 AM — quietNov 5, 2 PM — quietNov 5, 5 PM — quietNov 5, 8 PM — quietNov 5, 11 PM — quietNov 6, 2 AM — quietNov 6, 5 AM — quietNov 6, 8 AM — quietNov 6, 11 AM — quietNov 6, 2 PM — quietNov 6, 5 PM — quietNov 6, 8 PM — quietNov 6, 11 PM — quietNov 7, 2 AM — quietNov 7, 5 AM — quietNov 7, 8 AM — quietNov 7, 11 AM — quietNov 7, 2 PM — quietNov 7, 5 PM — quietNov 7, 8 PM — quietNov 7, 11 PM — quietNov 8, 2 AM — quietNov 8, 5 AM — quietNov 8, 8 AM — quietNov 8, 11 AM — quietNov 8, 2 PM — quietNov 8, 5 PM — quietNov 8, 8 PM — quietNov 8, 11 PM — quietNov 9, 2 AM — quietNov 9, 5 AM — quietNov 9, 8 AM — quietNov 9, 11 AM — quietNov 9, 2 PM — quietNov 9, 5 PM — quietNov 9, 8 PM — quietNov 9, 11 PM — quietYesterday, 2 AM — quietYesterday, 5 AM — quietYesterday, 8 AM — quietYesterday, 11 AM — quietYesterday, 2 PM — quietYesterday, 5 PM — quietYesterday, 8 PM — quietYesterday, 11 PM — quietToday, 2 AM — quietToday, 5 AM — quietToday, 8 AM — quietToday, 11 AM — quietToday, 2 PM — quietToday, 5 PM — quiet 1
Oct 31Nov 1Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9yesterdaynow · 8:40 PM ET
  1. 1

    Anthropic discloses Claude model converted kernel bug to working exploit

    Anthropic publicly disclosed that an unreleased Claude model turned a known Linux kernel bug into a functional remote root exploit targeting servers running multipath TCP listeners. The exploit requires no authentication and allows arbitrary command execution as root.

    “An unreleased Claude model turned a Linux kernel bug into a remote root exploit, and Ubuntu and Red Hat still lack a patch.”
    — IntCyberDigest

    • ‼️ An unreleased Claude model turned a Linux kernel bug into a remote root exploit, and Ubuntu and Red Hat still lack a patch. Anthropic says the exploit runs commands as root on servers with a multipath TCP listener, no login needed. Debian shipped its fix on 16 October.

      @IntCyberDigestX12d ago370▲view on X ↗
  2. background

    Debian ships patch for Linux kernel bug exploitable by unreleased Claude — Debian released a security patch addressing the vulnerability that the experimental Claude model later weaponized into a remote root exploit.