TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
140 points by oger
CVE-2026-98432 is a critical remote use-after-free vulnerability in the IPv4 TCP handshake of the Linux kernel, assigned a CVSS score of 9.8. The issue was addressed in an upstream patch released on October 15, but as of now, Ubuntu and RHEL have not yet provided an updated kernel to mitigate the vulnerability.