Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

Lobsters Hottest News
linux-kernel security-vulnerability tcp cvss ubuntu red-hat

Summary

A critical Linux kernel TCP vulnerability with a 9.8 CVSS score has been disclosed, affecting Ubuntu, Red Hat, and other major distributions, prompting widespread patching efforts.

<p><a href="https://lobste.rs/s/1sni1w/linux_kernel_tcp_flaw_with_9_8_cvss_score">Comments</a></p>
Original Article

Similar Articles

CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation

Hacker News Top

CVE-2026-98432 is a use-after-free in the Linux kernel's IPv4 TCP handshake path that could allow remote exploitation, with a Linux CNA CVSS of 9.8 and Red Hat's preliminary 8.1 score, while Anthropic's Frontier Red Team demonstrated remote root execution against an MPTCP listener; the article reviews patch validation and distribution-specific remediation steps.

WTF Ubuntu?

Hacker News Top

Ubuntu is criticized for failing to patch CVE-2026-98432, a critical CVSS 9.8 Linux kernel TCP bug with a working root exploit, more than two weeks after Debian and other distros shipped fixes, prompting the author to migrate servers off Ubuntu.

@tobi: What a disaster

X AI KOLs Following

Linux's stable kernels shipped fixes for CVE-2026-98432, a critical (CVSS 9.8) use-after-free in the IPv4 TCP handshake reachable by remote unauthenticated attackers; Anthropic reported the bug and says its Claude model wrote a working remote root exploit, while Ubuntu and RHEL remain unfixed.

@interjc: 大的来了

X AI KOLs Timeline

Linux 内核 MPTCP TCP 缺陷被评为 9.8 CVSS，Anthropic 演示了可在服务器上以 root 权限执行命令的漏洞利用，Ubuntu 和 RHEL 尚未修复，而 Debian、Oracle 等已发布部分补丁。