NewsBleepingComputer
Critical Linux kernel flaw allows remote root attacks on MPTCP servers
Teaser from the source
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on servers
Other advisories
- Not ratedosv:CLEANSTART-2026-GD49943HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently
- Not ratedosv:CLEANSTART-2026-CE51574cookie is a basic HTTP cookie parser and serializer for HTTP servers
- Not ratedosv:CLEANSTART-2026-WE58904SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read
- Not ratedosv:CLEANSTART-2026-GB34252SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption
- Not ratedosv:CLEANSTART-2026-AY90215Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients
- Not ratedosv:CLEANSTART-2026-ML24811SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate
- Not ratedosv:CLEANSTART-2026-MB86951Netty is a network application framework for development of protocol servers and clients
- Not ratedosv:CLEANSTART-2026-RC73838Netty is a network application framework for development of protocol servers and clients
Other news entries
- Linux kernel exploit enables remote root attacks on MPTCP serversNewsBleepingComputer
- In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data LeakNewsSecurityWeek
- Anthropic AI model finds Linux kernel bug that leads to remote root accessNewsCSO Online
- Hugging Face malware campaign returns to hijack GPUs for crypto miningNewsBleepingComputer
- Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 serversNewsThe Register — Security
- Chrome extensions with 13.4 million installs caught hijacking searchesNewsBleepingComputer
- Securing MCP servers before the AI rollout outpaces securityNewsCSO Online
- Discord to let search engines index public server messagesNewsBleepingComputer
ID