Anthropic's Research AI Finds Critical 9.8 Severity Zero-Day in Linux Kernel

Version 7.2.10 of the Linux kernel addresses a use-after-free security flaw, CVE-2026-98432, that could grant an attacker remote root access without authentication. The vulnerability in the kernel's TCP/IPv4 networking stack received a CVSS score of 9.8 and was identified by an unreleased internal research model from Anthropic. The discovery is part of a larger security audit by the internal Claude model, which built fully functional exploits for an Android lock screen bypass, a Windows kernel remote denial-of-service, and a series of high-severity flaws in the Chrome browser, with Google patching 62 of those Chrome vulnerabilities in version 156.