Critical Linux Bug Lets Hackers Take Over Millions of Servers
Your favorite websites and apps could be at risk from a single unpatched flaw.
A newly discovered flaw in Linux, the operating system that runs most of the internet's servers, could let hackers take over computers without any login. The bug is in the part of Linux that handles incoming network connections. An attacker can send a specially crafted message to a server and gain full control, like a master key to the building.
The flaw is rated 9.8 out of 10 for severity, and it affects Linux versions going back to 2016. Anthropic, an AI company, found the bug using its Claude model, which even wrote a working attack. The good news: the Linux team has already released a fix.
The bad news: many companies that package Linux for servers, like Ubuntu and Red Hat, haven't yet updated their versions. Until they do, millions of servers remain vulnerable. If you manage servers, check your provider's security tracker, install the update, and reboot. If you're a regular user, you don't need to do anything, but the websites and apps you use could be at risk until their servers are patched.
- The flaw lets attackers run commands as the all-powerful 'root' user on Linux servers without any password.
- Anthropic's AI found the bug and wrote a working attack, showing how AI can be used for both good and bad.
- Major Linux providers like Ubuntu and Red Hat haven't released patches yet, leaving many servers exposed.
Why It Matters
A single unpatched server can expose your data, so urgent updates are crucial for everyone's online safety.