CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15. RHEL and AlmaLinux have fixes; Ubuntu doesn't yet.

RHEL, AlmaLinux. Red Hat, Fedora, similar ones, always saving the day. Canonical, as usual, slacking. Negligent.

security

Linux's October 2026 TCP Use-After-Free: CVE-2026-98432

samourai

> CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15. RHEL and AlmaLinux have fixes; Ubuntu doesn't yet.

RHEL, AlmaLinux. Red Hat, Fedora, similar ones, always saving the day. Canonical, as usual, slacking. Negligent.