Home / Nov 04, 2026 / Story
0
#6 The Hacker News general November 03, 2026 at 11:23 UTC

Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing

By [email protected] (The Hacker News)

AI Summary

A use-after-free vulnerability in the Linux kernel's IPv4 TCP code, tracked as CVE-2026-98432 with a CVSS score of 9.8, enables remote unauthenticated attackers to achieve RCE; Red Hat has released patched kernels for RHEL 8, 9, and 10, while Ubuntu's fixes for its three newest LTS releases remain in opt-in testing with no general availability date announced. The flaw's unauthenticated remote exploitability makes it critical for any internet-facing Linux system, and Ubuntu's delayed stable release creates an extended exposure window for a large portion of enterprise deployments. Administrators running Ubuntu LTS should manually opt into the testing channel or implement network-level mitigations immediately.

Relevance score: 82.0/100

# More from November 04