News
cybersecurity Tracking AI adoption in North Korean threat actor tradecraft - Microsoft Security Blog cybersecurity Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions - The Hacker News cybersecurity Threat Modeling With 4 Simple Questions on a White Board - Dark Reading cybersecurity Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners - The Hacker News threat-intel Coruna iOS Exploit Kit Hidden Behind Malicious Ads Targets Crypto Seed Phrases, ADEX Reports - GBHackers cybersecurity Google Says Gemini 4 Carbon Leads in Finding, Exploiting and Fixing Vulnerabilities - SecurityWeek cybersecurity How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI - SecurityWeek cybersecurity Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps - SecurityWeek cybersecurity CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks - BleepingComputer threat-intel AppViewX Expands Quantum Trust Hub with Cryptographic Discovery, Posture Management, and Remediation - GBHackers cybersecurity Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities - SecurityWeek cybersecurity Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities - The Hacker News threat-intel Cisco Talos Uncovers KeyDrift Malware Targeting SD-WAN Controllers to Steal Network Encryption Keys - GBHackers cybersecurity BAE Says No Data Extracted in Incident Hitting Bankruptcy Courts - SecurityWeek cybersecurity The day after tomorrow: After PHP2Shell, it gets worse, then defenders win - Aikido Security
1 / 15
All news ›
Cybersecurity

Linux kernel: remote use-after-free in IPv4 TCP via IP options (CVE-2026-98432), no Ubuntu fix yet · ReconX Watchtower

Pro CISO ·

A critical flaw in the Linux kernel's IPv4 TCP code, tracked as CVE-2026-98432 and rated 9.8 by CVSS, can be triggered remotely without logging in by sending crafted connection requests to any listening TCP port. Attackers could crash a system, read kernel memory, or corrupt it, though exploitation is not yet reported. The upstream kernel is fixed, but Ubuntu had not yet released a fixed kernel as of 29/10/2026. Until fixed kernels are installed and systems rebooted, administrators are advised to drop incoming TCP packets carrying IP options at the firewall. Eg. With nftables: a prerouting rule `ip hdrlength > 5 meta l4proto tcp drop`, loaded at boot.

Continue on Pro CISO ↗ ‹ All news Get the newsletter