alt Hacker NewsTo be fair: while critical (9.8) it has an EPSS score of <1% (probability of it being actually used). According to [1], [2], and others, at worst the issue results in a kernel crash or a denial of service. I read the post by Anthropic too, but something just doesn't reconcile there between everyone saying its a DoS, and Anthropic alone claiming RCE. So far the advisories I read state "under specific conditions ... result in a kernel crash" and similar.
[1] https://app.opencve.io/cve/CVE-2026-98432 [2] https://aws.amazon.com/security/security-bulletins/2026-160-...
I had the same question about the actual exploit on another thread: https://news.ycombinator.com/item?id=50319143
It’s only recently I realised that a lot of this very clever vulnerabilities are often not actually exploitable, except in quite specific conditions.