Claude discovers a severe Linux kernel vulnerability that lay dormant for 11 years and generates a working exploit
Anthropic's Claude model discovered a use-after-free (UAF) flaw in the Linux kernel's IPv4 TCP handshake. The code was submitted in October 2015 and introduced with Linux 4.4; an attacker can trigger remote root privilege execution through network traffic without a password or user interaction. Claude also generated a working two-stage exploit: the first stage took about 48 minutes to defeat kernel address space layout randomization protections, and the second stage took only 5 minutes to execute arbitrary commands with root privileges. The whole process took about 53 minutes, and a failure does not cause the target to crash. The upstream fix was completed on October 15, covering 5.10.272, 6.1.190, 6.12.113, 6.18.56, 7.2.10, and 7.3-rc7, but as of November 1, Ubuntu 22.04 LTS, 24.04 LTS, 26.04 LTS, and 26.10 are still marked as affected, and the fix is still under development.
#Safety / alignment#Anthropic