CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation
23 points by cobychapple
CVE-2026-98432 is a critical vulnerability in Linux’s IPv4 TCP implementation, rated 9.8 for severity. It involves a use-after-free flaw that could lead to remote code execution (RCE) in multi-path TCP (MPTCP) scenarios. The article discusses exposure checks, available patches, and methods for safe validation to mitigate the risk.