… But it was eventually fixed in a pull request , with the bug deemed to be simply "informative." MORE CONTEXT If an AI agent screws up while running your business, there's nobody to sue Patch to end i486 support hits Linux kernel merge queue Anthropic closes door on subscription use of OpenClaw AI w… …
… The company claims it has found a 27-year-old bug in OpenBSD, a 16-year-old vulnerability in FFmpeg's video encoding code, and a new set of chained exploits in the Linux kernel that enable an attacker to escalate from ordinary user access to complete root control. …
… From here, the attackers target the XNU kernel through selector 1 in the AppleM2ScalerCSCDriver driver. This triggers a Copy-On-Write vulnerability CVE-2025-43510 . …
… "Those 74 cases are confirmed instances where we found clear evidence that AI-generated code contributed to the vulnerability," he said. …
… While the CVE record credits "Nicholas Carlini using Claude, Anthropic" with finding and reporting this bug - not Glasswing, specifically - Anthropic's blog last week namedropped CVE-2026-4747 , and described it thus: "Mythos Preview fully autonomously identified and then exploited a 17-year-old re… …
… Right now, we're giving it to everyone." Work is already underway to make it usable beyond the kernel's own infrastructure. That matters because, as Kroah-Hartman keeps emphasizing, the AI wave is not just a kernel problem. …
… "It's a critical vulnerability, and they're stonewalling the publication of an advisory that is in the public interest, that is correctly formulated, that people need to have in their 'cargo audit' command so that they can learn about the vulnerability in a way that's commensurate with its impact,"… …
… How it works The first vulnerability, CVE-2026-34980, stems from CUPS' default policy that accepts anonymous print-job requests, and only blocks remote printing when the queue is not shared. …
… If the WireGuard team became aware of a vulnerability affecting the VPN, he would have no way of signing an update to patch it. …
… We’re told the two organizations “work directly with maintainers and their communities to make emerging security capabilities accessible, practical, and aligned with existing project workflows.” Further: “The effort will support sustainable strategies that help maintainers manage growing security d… …