Greg Kroah-Hartman

Stories

Linux kernel patches 11-year-old TCP bug after Claude writes a root exploit

Active kernel maintainer

Linux kernels have carried a race condition in their IPv4 TCP code since October 2015, when the faulty commit landed for version 4.4. The kernel's CVE team published it as CVE-2026-98432 on October 15, scoring it 9.8 out of 10.

Updated Nov 1

File-notification side-channel attacks exposed across Windows, Linux, Android and macOS

New Capabilities

As of September 2026: Coordinated the partial mitigation of CVE-2025-68788

A process running without special permissions can track what you type, which websites you visit, and when you open or delete files. It can even overlay a fake password prompt on a legitimate one. The technique doesn't exploit a bug in file handling—it abuses the file-notification systems that Windows, Linux, Android and macOS have shipped for two decades.

Updated Sep 29