CVE-2026-98432 was first published on October 15th, thanks to Linux's cautious CVE policy. On October 24th, after a blog post by Anthropic, it had a CVSS score of 9.8 assigned.