Sat 31 Oct
LiveGet it free
ZOTPAPER

News without the noise

← Vulnerabilities

CVE-2026-98432

Critical Linux kernel flaw allows remote root exploit via MPTCP

The flaw is a use-after-free memory corruption bug in the Linux kernel's TCP connection handling. Unauthenticated remote attackers can exploit this to execute arbitrary commands with root privileges on systems with Multipath TCP (MPTCP) listeners. The Linux kernel has released patches, and the flaw has not been listed on CISA's known exploited vulnerabilities catalog.

Linux · Updated 31 Oct · From 1 of our story and the public records

Being exploitedNot reportedNo attacks reported in the records
CISA known exploitedNot listedThe US list of flaws under attack
SeveritycriticalCVSS 9.8 of 10
FixAvailableFixed versions below

Am I affected?

If you run a version older than the fixed one for your line, yes.

Version lineFixed in
Linux e3f33b0a1d89d738e2b913dab519226eaf76e15be3f33b0a1d89d738e2b913dab519226eaf76e15b
Linux b3b027ef0cd322bfa839b9aaf5b27551eea54cf6b3b027ef0cd322bfa839b9aaf5b27551eea54cf6
Linux a47406c769f72c070386985488f1c4d057df86b2a47406c769f72c070386985488f1c4d057df86b2
Linux 95a8c8fa9f27dce64c40c41c062de7728bf34ab595a8c8fa9f27dce64c40c41c062de7728bf34ab5

What to do

  1. Update your Linux kernel to a version containing the official fix, such as the commits e3f33b0a1d89d738e2b913dab519226eaf76e15b or any of the other fixed versions listed in the CVE record.
  2. Install the updated kernel packages provided by your Linux distribution, such as Ubuntu and Red Hat.
  3. As a workaround, disable Multipath TCP (MPTCP) on services that do not require it, as remote code execution has been demonstrated on MPTCP-enabled servers.

What happened

  1. 29 OctThe Hacker News reports a critical Linux kernel TCP flaw with a 9.8 CVSS score affecting Ubuntu, Red Hat and other distributions.
  2. 30 OctZotpaper reports the flaw allows unauthenticated remote attackers to execute arbitrary commands as root on MPTCP servers.
  3. 30 OctBleepingComputer reports the critical flaw allows remote root attacks on MPTCP servers.
  4. 30 OctHacker News reports the Linux TCP use-after-free risk and the availability of patch validation.

The record

CVEWhat it isSeverityCISA listedExploit chance, 30 days
CVE-2026-98432ipv4: free inet_opt and ireq_opt after an RCU grace periodcritical 9.8No0.4%

Our reporting

30 OctCritical Linux kernel flaw allows remote root exploit via MPTCP

Reported elsewhere

BleepingComputer · 30 OctCritical Linux kernel flaw allows remote root attacks on MPTCP servers ↗Hacker News: Front Page · 30 OctCVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation ↗The Hacker News · 29 OctLinux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions ↗

The records

CVE-2026-98432 on NVD ↗
Is anything you run affected?Members connect Zotpaper to their AI assistant. It checks your own project against every vulnerability on this page and the others we track, and says what to update.
How it works