Linux maintainers have released upstream fixes developed by Eric Dumazet to address the critical flaw, which impacts branches ranging from 5.10.272 up to 7.3. While Debian and select SUSE platforms have rolled out updates, distributions like Ubuntu and Red Hat Enterprise Linux 8, 9, and 10 still lack definitive fixes or approved mitigations. Containerized workloads cannot be secured simply by updating images, as protection requires patching the underlying host kernel. The defect solely targets IPv4 network handshakes while leaving IPv6 connections entirely unaffected.
Key points
Updating container images is insufficient for remediation because containerized environme…: Updating container images is insufficient for remediation because containerized environments depend entirely on the host kernel.
Enterprise distributions like Ubuntu and Red Hat remained vulnerable late into October 20…: Enterprise distributions like Ubuntu and Red Hat remained vulnerable late into October 2026 while awaiting backported packages.
Networks operating exclusively on IPv6 connections are unaffected by this critical kernel…: Networks operating exclusively on IPv6 connections are unaffected by this critical kernel heap memory corruption flaw.
Sources checked by our analysis pipeline: 1
Overview
Linux's stable kernels shipped a fix on October 11 and 15, 2026 for CVE-2026-98432, a use-after-free in the IPv4 TCP handshake that a remote, unauthenticated peer can reach. The kernel's own CVE Numbering Authority (CNA) scores it CVSS 3.1 9.8, Critical. The fixed releases are 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.56, 7.2.10, and 7.3, and the bug goes back to Linux 4.4. The upstream fix is a four-line change, but most servers run a distribution's kernel, and as of 8:00 PM CDT, October 29, Ubuntu's tracker still reads "Vulnerable" for its kernel on every release, and Red Hat lists RHEL 8, 9, and 10 as affected with no fix.
Why it's urgent: the bug sits in code every Linux server runs when it accepts an IPv4 TCP connection, before any application sees the connection. Anthropic, whose researcher reported it, says its Claude model wrote a working proof-of-concept exploit that runs commands as root on "Linux servers with a multipath TCP listener," with no credentials. See the timeline.
Citing national security concerns, Malaysian officials have prohibited civil servants from utilizing the Tel Aviv-based platform over fears that personal data could be exploited under Israeli jurisdiction. The nation maintains no formal diplomatic ties with Israel and actively champions Palestinian advocacy. However, the official push faces severe friction as motorists encounter substantial shortcomings with domestic software.
Operating as a digital preservation bridge, the platform accelerates the creation of public domain e-books for the Project Gutenberg archive. By dividing scanned books into individual pages, independent contributors can simultaneously compare optical character recognition text against original source material. This crowdsourced model relies entirely on public donations and community volunteers to systematically process literary works.
Originally developed through a partnership between major technology vendors such as Sun, HP, and IBM, this classic X11 platform has officially shifted to a public licensing model. The move grants modern users free access to the historic UNIX graphical interface, which is now supported and documented on SourceForge. Modern hardware allows the legacy software to operate with notable speed while preserving its original scripting architecture.