Linux TCP Vulnerability: Red Hat Fixes Available, Ubuntu Updates Still in Testing
Technology · First reported 2 Nov, 18:39 · Updated 13:25
CVE-2026-98432 is a Linux IPv4 TCP flaw rated 9.8 by the kernel CVE team. Red Hat has released fixes for RHEL 8, 9 and 10, while updates for Ubuntu 22.04, 24.04 and 26.04 remain in an opt-in testing channel, with no regular-release date announced.
- The vulnerability is a use-after-free in IPv4 TCP code that can be triggered remotely without authentication and may lead to code execution.
- Red Hat released fixed kernels for RHEL 8, 9 and 10 on November 1; a reboot is required after installation.
- Ubuntu fixes for 22.04, 24.04 and 26.04 are in the opt-in -proposed channel, and Canonical has not given a date for release to the regular update channel.
Summary written by Lux AI from 2 articles
Key facts
- Vulnerability
- CVE-2026-98432, a use-after-free in Linux kernel IPv4 TCP code.
- Kernel CVE team rating
- 9.8 out of 10 on the CVSS scale.
- Red Hat fixes
- RHEL 8, 9 and 10 updates shipped November 1.
- Ubuntu status
- Fixes for 22.04, 24.04 and 26.04 are in -proposed; no regular-channel release date was given.
- Reported attacks
- The centre article says no vendor, CERT or kernel CVE team had reported attacks using the flaw.
Source spectrum
Far left
Left
Lean left
Centre
Lean right
Right
Far right
Unrated
Left 0 · Centre 1 · Right 0 of 1 rated sources · +1 unrated
All coverage
Coverage over time
LeftCentreRight
Articles per hour since first reported, by side.
Ownership
- Corporation 50% (1)
- Unknown 50% (1)
Share of the 2 sources by owner type.