Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
Summary
Red Hat has released patched kernels for a critical use-after-free vulnerability in the Linux kernel's IPv4 TCP code. The flaw, identified as CVE-2026-98432, is remotely exploitable by unauthenticated attackers. Ubuntu has also released fixes, but they are currently in their testing channel.
IFF Assessment
FOE
This vulnerability allows for remote code execution, posing a significant threat to Linux systems and defenders.
Severity
9.8
Critical
(CVSS v3.1)
Defender Context
Defenders should prioritize patching affected Red Hat Enterprise Linux systems immediately upon availability of the fixed kernels. For Ubuntu users, vigilance is required to track the availability of these fixes in regular update channels to mitigate the risk of remote code execution on their systems.