Linux Kernel Vulnerability (CVE-2026-98432)

Signals

1. Nov 03 11:23 UTCRed Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing (opens source in a new tab) Fixed kernels for a use-after-free vulnerability in the Linux kernel's IPv4 TCP code are now available for Red Hat Enterprise Linux 8, 9, and 10, while Ubuntu's fixes for its three newest long-term-support releases remai… Med severityResearch & NewsC130 The Hacker News
2. Nov 03 06:44 UTCUpdate on the 9.8 CVSS TCP/IP RCE in the Linux kernel (CVE-2026-98432): we've detected what appears to be a threat actor activity scanning t (opens source in a new tab) Update on the 9.8 CVSS TCP/IP RCE in the Linux kernel (CVE-2026-98432): we've detected what appears to be a threat actor activity scanning the entire internet for exposed affected systems. Our own scanning also suggests … Info severityResearch & NewsC159 Mastodon @briankrebs@infosec.exchange
3. Nov 02 10:55 UTCLinode: Customer Security Advisory: CVE-2026-98432 (opens source in a new tab) investigating. While we continue to deploy kernel patches across our infrastructure, we have also deployed network rules that drop IPv4 packets with optional headers on public and VPC interfaces. This eliminates the imme… Info severityProvider StatusC123 Provider status pages (Statuspage)
4. Nov 02 10:53 UTCAkamai: Customer Security Advisory: CVE-2026-98432 (opens source in a new tab) investigating. We are continuing to investigate this issue. Customers and partners can find more details on the Akamai Community: https://community.akamai.com/customers/s/feed/0D5a700001cIGoWCAW. We will provide an updat… Info severityProvider StatusC123 Provider status pages (Statuspage)
5. Nov 02 08:00 UTCLinux kernel RCE CVE-2026-98432 (opens source in a new tab) CVSSv3 Score: 9.8 CVE-2026-98432:ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another… High severityVendorC44 Fortinet PSIRT
6. Oct 31 02:08 UTCAkamai: Customer Security Advisory: CVE-2026-98432 (opens source in a new tab) investigating. We are continuing to investigate this issue. Customers and partners can find more details on the Akamai Community: https://community.akamai.com/customers/s/feed/0D5a700001cIGoWCAW. We will provide an updat… Info severityProvider StatusC123 Provider status pages (Statuspage)
7. Oct 31 01:55 UTCLinode: Customer Security Advisory: CVE-2026-98432 (opens source in a new tab) investigating. We are in the process of deploying mitigations for the underlying known attack vector while we continue to analyze any other possible impact. Customers are strongly advised to apply OS updates from their u… Info severityProvider StatusC123 Provider status pages (Statuspage)
8. Oct 30 21:18 UTCLinode: Customer Security Advisory: CVE-2026-98432 (opens source in a new tab) investigating. We are continuing to investigate this issue. The appropriate subject matter experts are engaged. Subsequent updates around mitigation status will be posted as progress is made. Info severityProvider StatusC123 Provider status pages (Statuspage)
9. Oct 30 21:09 UTCAkamai: Customer Security Advisory: CVE-2026-98432 (opens source in a new tab) investigating. We are continuing to investigate this issue. Customers and partners can find more details on the Akamai Community: https://community.akamai.com/customers/s/feed/0D5a700001cIGoWCAW. We will provide an updat… Info severityProvider StatusC123 Provider status pages (Statuspage)
10. Oct 30 18:10 UTCLinode: Customer Security Advisory: CVE-2026-98432 (opens source in a new tab) investigating. Akamai is aware of the recently published remote code execution CVE-2026-98432. We are actively investigating and taking the appropriate mitigation actions, while we continue to monitor our platform in par… Info severityProvider StatusC123 Provider status pages (Statuspage)
11. Oct 30 18:03 UTCAkamai: Customer Security Advisory: CVE-2026-98432 (opens source in a new tab) investigating. Akamai is aware of the recently published remote code execution CVE-2026-98432. We are actively investigating and taking the appropriate mitigation actions, while we continue to monitor our platform in par… Info severityProvider StatusC123 Provider status pages (Statuspage)
12. Oct 29 15:57 UTCLinux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions (opens source in a new tab) A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The kernel's own CVE team rates it 9.8 out of 10 on the CVSS scale. Anthro… Med severityResearch & NewsC130 The Hacker News