Understand this story
The Linux stable kernel fixed a use-after-free vulnerability, CVE-2026-98432, in the IPv4 TCP handshake path on October 11 and 15. The kernel CNA rated the vulnerability as CVSS 3.1 9.8 Critical, affecting versions 4.4 and later. As of October 29, kernels across Ubuntu versions are still marked as affected, and the default kernels of RHEL 8, 9, and 10 and Amazon Linux 2 have no fix yet. Anthropic said its Claude model wrote remote root exploit code in the lab targeting servers with a multipath TCP listener, but it was not disclosed.
AI-generated from public reports
Latest development · Report
Fix and Troubleshooting for the Linux IPv4 TCP Handshake Use-After-Free Vulnerability CVE-2026-98432Developments
1 confirmed developments
- Source:English text is being prepared.
Reports and discussion timeline
Browse reports and discussion by time. Their evidence levels remain distinct.
Oct 30
Hacker News TrendingSelected
Fix and Troubleshooting for the Linux IPv4 TCP Handshake Use-After-Free Vulnerability CVE-2026-98432
The Linux stable kernel fixed a use-after-free vulnerability, CVE-2026-98432, in the IPv4 TCP handshake path on October 11 and 15. The kernel CNA rated it CVSS 3.1 9.8 Critical, affecting versions 4.4 and later. As of October 29, kernels for all Ubuntu versions are still marked as affected, and the default kernels of RHEL 8, 9, and 10 and Amazon Linux 2 have no fix yet. Anthropic said its Claude model wrote, in a lab setting, remote root exploit code targeting servers with a multipath TCP listener, but did not disclose it.