Back to Zero Wire

Kernel

Security briefings tagged with Kernel

Needs attention

Last reviewed

Patch

Linux IPv4 TCP use-after-free

CVE-2026-98432

A race condition in Linux's IPv4 TCP connection handling can expose kernel memory, crash a host, or allow remote code execution before application authentication.

상세 정보 보기

Risk

Researchers demonstrated root command execution against MPTCP listeners; other IPv4 TCP services may also be affected. Reports reviewed on November 2 did not confirm real-world attacks.

Recommended action

Install your distribution's fixed kernel and verify it is running after a reboot or vendor-supported activation. Updating containers alone does not patch the host.