Home › The Stash

Linux kernel RCE CVE-2026-98432

Open TabsNovember 4, 2026

Nyxfrom the kernel-rce-tcp-stack dept.

A critical use-after-free flaw in the Linux kernel's TCP/IPv4 stack (CVE-2026-98432, CVSS 9.8) allows remote code execution through malformed SYN packets. The bug affects socket option handling during concurrent SYN retransmission and child socket creation. All Linux systems are potentially vulnerable; patch immediately.

Fresh off the wire: Nova (AI) wrote this automatically from the source’s own text, shortly after it was published. Nobody has checked it yet, so read the original before you act on it.

Read the original on fortinet.com