Linux TCP use-after-free CVE-2026-98432 yields lab remote root
Upstream CVSS is 9.8 and Red Hat scores 5.9; Anthropic’s root chain used a lab Multipath TCP listener.
66
- Mentions · 7d3
- Mentions · 30d37
- All mentions107
- First seenSep 7, 2026
- Last mentioned22h ago
Timeline
107 articles · newest firstUbuntu: Brotli mishandles streams, enabling possible DoS or code execution
USN-8956-1 says a remote attacker could abuse malformed compressed streams; no CVE, versions, or exploitation status are given.
42
Ubuntu: nginx flaws may crash the server or allow code execution
Two named CVEs cover alias-plus-rewrite and regex map handling; a third HTTP/3 issue is only partly described.
58
Ubuntu warns of zlib heap overflow in non-blocking writes
Ali Firas found mishandled writes that can crash zlib or allow arbitrary code execution.
50
OpenVPN certificate subject handling flaw may allow impersonation
Ubuntu says a remote authenticated user could possibly impersonate other users; no CVE or versions are given.
42
Tornado flaws may cause denial of service or expose data
USN-8952-1 lists six CVEs that could also let an attacker bypass access controls.
36
poppler mishandles PDF password length, enabling denial of service
Ubuntu notice USN-8950-1 says an attacker could crash poppler while decrypting certain encrypted PDF files.
28
Ubuntu fixes Ghostscript code-execution flaws
Crafted PostScript or font files could bypass the sandbox or crash Ghostscript.
58
XZ Utils mishandles decoder memory failures, risking code execution
Ubuntu's USN-8945-1 says a bad write during decoder reinitialization could cause denial of service or arbitrary code execution.
58
Protocol Buffers PHP parser can crash on bad input (USN-8943-1)
Ubuntu says negative varint lengths or missing recursion limits can crash apps or exhaust resources.
42
USN-8933-1: RabbitMQ Server vulnerabilities
Ubuntu’s USN-8933-1 fixes RabbitMQ issues that could enable CSRF, XSS, and denial of service.
34
USN-8931-1: Apache HTTP Server vulnerabilities
Ubuntu patched Apache HTTP Server flaws that may leak data, misroute proxy requests, or allow denial of service or code execution.
62
USN-8930-1: U-Boot vulnerabilities
Ubuntu fixed U-Boot flaws that could crash systems or execute code through NFS or HTTP handling.
44
USN-8927-1: curl vulnerabilities
Ubuntu’s USN-8927-1 patches curl flaws that may leak data or reuse the wrong network interface.
38
USN-8926-1: urllib3 vulnerabilities
Ubuntu fixes three urllib3 flaws, including certificate validation bypass and denial-of-service bugs.
48
USN-8914-1: Google Guest Agent, Google OS Config Agent vulnerability
Ubuntu USN-8914-1 patches Punycode handling in Google Guest Agent and OS Config Agent that allowed hostname access-control bypass and privilege escalation.
22
Canonical Websites Disrupted in Second DDoS Attack This Year
Canonical websites including ubuntu.com experienced a DDoS attack causing approximately four hours of downtime, the second this year.
35
USN-8907-1: libgit2 vulnerability
Ubuntu warns libgit2 TLS IP certificate checks can enable a machine-in-the-middle attack.
36
USN-8902-1: libarchive vulnerability
Ubuntu patches libarchive signed integer overflow in ZIP writer that could let crafted encrypted entries crash the library or execute arbitrary code.
30
USN-8906-1: Linux kernel (IBM) vulnerabilities
Ubuntu patched IBM Linux kernel flaws, including a local Arm TLB issue tracked as CVE-2025-10263.
38
USN-8905-1: Linux kernel (GCP) vulnerabilities
Ubuntu issued USN-8905-1 fixing multiple Linux kernel vulnerabilities on Google Cloud images.
32
USN-8894-1: poppler vulnerabilities
Ubuntu's USN-8894-1 fixes Poppler overflows and a null dereference that can crash or run code.
32
USN-8889-1: Linux kernel (OEM) vulnerabilities
Ubuntu patched OEM Linux kernel flaws, including AMD SEV-SNP issue CVE-2023-20585.
32
USN-8888-1: Linux kernel (Azure) vulnerabilities
Ubuntu’s USN-8888-1 patches Azure Linux kernel flaws, including AMD SEV-SNP bug CVE-2023-20585.
36
USN-8882-1: Tesseract vulnerabilities
Ubuntu’s USN-8882-1 fixes Tesseract flaws in crafted .traineddata models that can crash the engine or execute code.
48
USN-8880-1: FreeRDP vulnerabilities
Ubuntu's USN-8880-1 warns FreeRDP flaws could leak data, crash the client, or allow code execution.
46
USN-8874-1: sg3_utils vulnerability
Ubuntu's USN-8874-1 says sg3_utils may run commands via unsanitized device identification data.
36
USN-8875-1: Linux kernel vulnerabilities
Ubuntu patches Linux kernel flaws, including a local null-pointer crash in the i.MX clock driver (CVE-2022-3114).
36
USN-8873-1: Unbound vulnerabilities
Ubuntu patches two Unbound memory bugs that could allow denial of service or code execution.
36
USN-8870-1: OpenStack Aodh and Watcher vulnerability
Ubuntu warns OpenStack Aodh and Watcher flaws can leak alarm metadata or trigger unauthorized action plans.
44
USN-8868-1: LibreOffice vulnerabilities
Ubuntu's USN-8868-1 fixes LibreOffice flaws that could crash the app or execute code.
38
USN-8867-1: Ceph vulnerability
Ubuntu warns Ceph RGW may honor unsigned x-amz headers on presigned URLs, enabling privilege escalation.
36
USN-8851-2: Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu patched Raspberry Pi Linux kernel flaws in NFS, IPv6, and Netfilter that could compromise systems.
32
USN-8862-1: libXpm vulnerability
Ubuntu USN-8862-1 says malformed zero-dimension XPM images can make libXpm exhaust resources.
24
USN-8861-1: OpenSSL vulnerabilities
Ubuntu patches two OpenSSL QUIC denial-of-service flaws that can exhaust CPU or memory.
42
USN-8860-1: OpenStack Designate vulnerability
Ubuntu warns OpenStack Designate may let authenticated users redirect DNS or cause a denial of service.
36
USN-8857-1: KCoreAddons vulnerability
Ubuntu warned that KCoreAddons mishandles shell quoting, allowing possible command execution via KShell::quoteArgs.
34
USN-8858-1: Authen::SASL vulnerability
Ubuntu patched Authen::SASL after improper login validation could allow unauthorized access.
24
USN-8855-1: GStreamer Bad Plugins vulnerability
USN-8855-1 warns that GStreamer Bad Plugins can crash or run code via a crafted WAV file.
36
USN-8845-1: GVfs vulnerabilities
Ubuntu warns of two GVfs flaws: malicious SFTP input may yield code execution, and a local bug can grant root.
48
Related CVEs
by mentions- CVE-2025-10263<1%9.1Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 &…
- CVE-2026-53221<1%9.8Linux kernel: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
- CVE-2026-53131<1%9.4Linux kernel: netfilter: require Ethernet MAC header before using eth_hdr() `ip6t_eui64`, `xt_mac`, the `bitmap:ip,mac`…
- CVE-2025-38724<1%7.8Linux kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that…
- CVE-2025-54518<1%7.3Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a…
- CVE-2023-20585<1%5.6Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds…
- CVE-2026-53043<1%9.1Linux kernel: ocfs2/dlm: validate qr_numregions in dlm_match_regions() Patch series "ocfs2/dlm: fix two bugs in…
- Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of…
- Symlink-following chown flaw in libvirt swtpm logs
- Heap buffer overflow in LibreOffice Draw PDF import
Appears with
- Canonicalvendor · 53
- Linux kernelproduct · 27
- Canonicalorganization · 26
- Ubuntuvendor · 24
- Ubuntuproduct · 6
- Linuxorganization · 5
- Armvendor · 4
- curlproduct · 3
- AMDvendor · 3
- Oracleorganization · 3
- Googleorganization · 3
- NVIDIAorganization · 3
- Microsoftvendor · 2
- Azureproduct · 2
- Linux kernelai model · 2
- NVIDIAvendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.