Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
By [email protected] (The Hacker News)
AI Summary
A use-after-free vulnerability in the Linux kernel's IPv4 TCP code, tracked as CVE-2026-98432 with a CVSS score of 9.8, enables remote unauthenticated attackers to achieve RCE; Red Hat has released patched kernels for RHEL 8, 9, and 10, while Ubuntu's fixes for its three newest LTS releases remain in opt-in testing with no general availability date announced. The flaw's unauthenticated remote exploitability makes it critical for any internet-facing Linux system, and Ubuntu's delayed stable release creates an extended exposure window for a large portion of enterprise deployments. Administrators running Ubuntu LTS should manually opt into the testing channel or implement network-level mitigations immediately.
Relevance score: 82.0/100
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →