Anthropic's security research team has disclosed that its unreleased Claude model, during systematic testing, discovered a critical vulnerability—CVE-2026-98432—that had been lurking in the Linux kernel for 11 years. With a CVSS score of 9.8, it is a maximum-severity vulnerability enabling remote code execution.