Back to Zero Wire

Kernel

Security briefings tagged with Kernel

Needs attention

Active incidents, new guidance or unresolved scope that security teams should review now.

Last checked

Patch

Linux IPv4 TCP use-after-free

CVE-2026-98432

A race condition in Linux's IPv4 TCP connection handling can expose kernel memory, crash a host, or allow remote code execution before application authentication.

Read the briefing

Why this needs attention

An unauthenticated remote attacker can reach the vulnerable Linux kernel code before application authentication. Researchers demonstrated root command execution against MPTCP listeners, and distribution-specific patch availability requires active review. Exploitation in the wild is not established in the reviewed sources.

What to do now

Check the running host kernel against your distribution's CVE advisory, apply its fixed kernel, and complete the required reboot or vendor-supported activation procedure. Verify that the fix is active, including on container hosts and Kubernetes nodes.