A lost race doesn't crash Linux, it only fails the handshake. So an unreleased Claude model kept retrying: 48 min to leak a kernel pointer, 5 more to root on an MPTCP server.
CVE-2026-98432, CVSS 9.8, kernels 4.4+
Fixed: 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.56