Linux TCP use-after-free CVE-2026-98432 yields lab remote root
Upstream CVSS is 9.8 and Red Hat scores 5.9; Anthropic’s root chain used a lab Multipath TCP listener.
66
- Mentions · 7d1
- Mentions · 30d6
- All mentions16
- First seenAug 31, 2026
- Last mentioned23h ago
Timeline
16 articles · newest firstcurl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
curl 8.23.0 fixes high-severity HTTP/2 use-after-free CVE-2026-92392 after a PoC showed client code execution.
66
OpenSSH Ships on Every Mac, Linux Server and Windows. Its Creator Trusts No One
Profile of OpenSSH creator Theo de Raadt, whose OpenBSD design stayed outside the 2024 xz backdoor.
24
Critical libheif Vulnerability Could Enable Remote Code Execution Through WordPress Image Uploads
A critical libheif heap overflow, fixed in 1.23.3, enabled authenticated WordPress RCE via crafted HEIC uploads.
66
Debian has Patched 1,313 Flaws in Massive Update Leading to DoS and Privilege Escalation Attacks
Debian's DSA-6528-1 updates Trixie's Linux kernel to 6.12.111-1, fixing 1,313 CVE entries covering privilege escalation, DoS, and information leaks.
50
Several vulnerabilities have been discovered in the Linux kernel
Debian published DSA-6528-1, a Linux kernel update covering hundreds of CVEs.
35
Major rsync upgrade in Debian because of 33 CVEs
Debian bumps rsync to 3.5.0 on Trixie to fix 33 CVEs, with breaking security changes.
68
OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted
OpenSSL patches high-severity DTLS flaw CVE-2026-84782 (CVSS 8.2) that can leak unencrypted heap memory or crash DTLS connections.
55
Re: "several" CVEs in latest Debian linux security advisory DSA 6528-1
Mailing list reply defends Debian's DSA 6528-1 advisory bundling many CVEs, citing changelog review effort to limit churn.
12
"several" CVEs in latest Debian linux security advisory DSA 6528-1
Debian DSA 6528-1 lists 1,313 Linux kernel CVEs that may enable privilege escalation, crashes, or leaks.
28
crontab(1) silently truncates file path arguments >=100 chars
A Debian bug report says crontab truncates file paths of 100 or more characters, risking the wrong crontab.
15
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
Hacktron researchers used Claude Opus 5 to chain a libheif flaw and OpenAI SSO weakness, taking over staff ChatGPT and Codex accounts; OpenAI paid $6,500.
62
A heap overflow and SSO misconfiguration to compromise OpenAI internal repos
Hacktron researchers chained a libheif heap overflow in Discourse with an OpenAI SSO flaw to take over employee ChatGPT/Codex accounts and access internal repositories.
78
CVE-2026-87464: RCE outside sandbox in Chromium prior to 153.0.8010.36
CVE-2026-87464 is a critical use-after-free in Chrome's WebGL allowing sandbox-escaping RCE via crafted HTML pages, fixed in 153.0.8010.36.
78
Re: Vulnerabilities fixed in libxml2-2.15.4
libxml2 2.15.4 patches two flaws including a heap buffer overflow in xmlDictAddQString tracked as CVE-2026-86137 and CVE-2026-86138.
45
Debian developers rejected an LLM ban and left disclosure voluntary
Debian developers voted to encourage voluntary disclosure of AI assistance in contributions rather than banning or mandating labeling of LLM-generated code.
30
Related CVEs
by mentions- CVE-2024-52560<1%5.5Linux kernel: fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr() Extended the `mi_enum_attr()`…
- CVE-2026-23137<1%5.5Linux kernel: of: unittest
- CVE-2025-21817<1%5.5Linux kernel: block: mark GFP_NOIO around sysfs ->store() sysfs ->store is called with queue freezed, meantime we have…
- CVE-2026-64058<1%7.8Linux kernel: netfs
- CVE-2025-38203<1%5.5Linux kernel: jfs
- Linux Kernel USB Type-C UCSI Debugfs Lifetime Bug Allows Local DoS
- CVE-2025-38621<1%5.5Linux kernel: md: make rdev_addable usable for rcu mode Our testcase trigger panic
- CVE-2024-58095<1%5.5Linux kernel: jfs: add check read-only before txBeginAnon() call Added a read-only check before calling `txBeginAnon` in…
- CVE-2025-22127<1%5.5Linux kernel: f2fs: fix potential deadloop in prepare_compress_overwrite() Jan Prusakowski reported a kernel hang issue as…
- CVE-2025-39925<1%5.5Linux kernel: can: j1939: implement NETDEV_UNREGISTER notification handler
Appears with
- Debianvendor · 6
- libheifproduct · 3
- Linux kernelproduct · 3
- Anthropicorganization · 3
- OpenAIvendor · 2
- Ubuntuorganization · 2
- OpenAIorganization · 2
- Claude Opus 5ai model · 2
- ChatGPTproduct · 2
- Claude Opus 5product · 2
- Red Hatvendor · 2
- Claude Opus 4.8ai model · 2
- Anthropicvendor · 2
- Discourseorganization · 2
- Discoursevendor · 2
- ImageMagickproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.