Linux kernel TCP flaw CVE-2026-98432 allows remote root on MPTCP servers
Anthropic says an unreleased Claude model built a root exploit in about 53 minutes; no in-the-wild attacks are confirmed.
74
Vendor
Red Hat
- Mentions · 7d5
- Mentions · 30d19
- All mentions39
- First seenAug 24, 2026
- Last mentioned5h ago
Timeline
39 articles · newest firstLinux TCP use-after-free CVE-2026-98432 yields lab remote root
Upstream CVSS is 9.8 and Red Hat scores 5.9; Anthropic’s root chain used a lab Multipath TCP listener.
66
Linux TCP use-after-free scored 9.8; Ubuntu and RHEL unfixed
Anthropic says Claude built a remote root exploit via MPTCP, a link absent from the CVE and fix.
76
16-year-old EDK II PXE buffer overflow runs code before Secure Boot
CVE-2026-97631 lets an adjacent-network attacker hang or hijack network boots on servers, and no stable EDK II release ships the fix yet.
70
Red Hat lists RHEL and Kafka products in advisory AV26-1084
The October 26 notice names affected lines but gives no CVE identifiers, impact, or fixed RHEL versions.
36
Red Hat says default RHEL 7 PHP 5.4.16 is vulnerable to CVE-2026-109619
An October 23 note says updated RHSB-2026-013 and VEX data reverse an earlier PHP 5 risk claim.
48
Two unfixed Linux KSMBD flaws allow remote code execution, CVSS 9.0
One flaw needs no authentication on port 445; neither has a CVE or a confirmed mainline fix.
78
PHP2Shell vulnerabilities patched by multiple vendors
PHP releases 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix CVE-2026-109618 and CVE-2026-109619 allowing unauthenticated remote code execution.
80
Linux networking flaw lets KVM guests escape to the host
Pwn.ai leaked host memory on Vercel production sandboxes and gained root on lab hosts; guest-only updates do not fix it.
84
Canadian Cyber Centre flags vulnerabilities across many Red Hat products
Advisory AV26-1061 lists every named product as affected in all versions and states no CVEs.
42
Linux bugs fixed per release over time: >2× rise since 2026-04
Linux 7.2 was the kernel's second-busiest release, while bugs fixed per release more than doubled since April 2026.
38
HardEval grades models on live RHEL 8 STIG remediation
Models emit Bash scripts run on a VM and scored by hidden OpenSCAP/OVAL checks; fourteen setups differ widely.
46
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
Linux vhost flaw CVE-2026-74580 lets local users gain root and, in some setups, escape a guest to the host.
75
Lightwell project filters out 400 Java library vulnerabilities
IBM and Red Hat's Lightwell says it found more than 400 new vulnerabilities in widely used Java libraries.
62
Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws
IBM and Red Hat say Lightwell fixed more than 400 previously unknown Java library flaws without naming them.
52
Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities
Red Hat’s Lightwell clearinghouse has patched over 400 Java open-source flaws and reached general availability.
48
OpenSSH Ships on Every Mac, Linux Server and Windows. Its Creator Trusts No One
Profile of OpenSSH creator Theo de Raadt, whose OpenBSD design stayed outside the 2024 xz backdoor.
24
Critical Red Hat Satellite Flaw Could Enable Root Password Theft and Code Execution Attacks
Red Hat fixed Satellite flaw CVE-2026-96659, which can leak host root passwords and enable Foreman command execution.
67
10 Best Container Registry Security Tools Compared (2026): Features & Pricing
A 2026 roundup compares 10 container registry security tools, led by free Harbor and Trivy.
16
Red Hat OpenShift Flaw Lets Attackers Bypass PGP Checks and Push Malicious Releases
Red Hat OpenShift oc-mirror can accept forged PGP signatures, letting attackers mirror malicious release images into disconnected registries.
54
Critical Linux KVM Flaw Enables Guest-to-Host Escape on ARM64 Systems
A Linux KVM bug on ARM64 with nested virtualization can let a guest read and write host kernel memory.
61
Siemens Industrial Edge Management
Siemens Industrial Edge Management has a critical unauthenticated password-reset flaw enabling remote account takeover.
74
Red Hat OpenShift Flaw Lets Attackers Poison Disconnected Registries With Malicious Releases
OpenShift oc-mirror flaw CVE-2026-75939 can bypass release signature checks and poison disconnected registries.
64
CISA Warns of Linux Kernel Vulnerabilities Actively Exploited in Attacks
CISA added three actively exploited Linux kernel flaws (CVE-2025-39682, CVE-2026-53266, CVE-2025-39964) to KEV with a September 21 federal patching deadline.
80
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
CISA added three actively exploited Linux kernel flaws (CVE-2025-39682, CVE-2026-53266, CVE-2025-39964) to KEV; federal patch deadline September 21, 2026.
80
Top 10 Best Container Registry Security Tools in 2026
A 2026 buyer's guide scores ten container registry security tools including Aqua, Snyk, JFrog Xray, Prisma Cloud, and Anchore.
25
12 Best Kubernetes Security Tools Compared (2026): Features & Pricing
GBHackers compares 12 Kubernetes security vendors including Sysdig, Wiz, Aqua, and Cisco Isovalent on features, pricing units, and procurement strategy.
25
12 Best Kubernetes Security Tools Compared (2026): Features & Pricing
A buying-guide comparison of twelve Kubernetes security vendors, from free OSS tools like Falco and Kubescape to paid platforms led by Sysdig and Aqua.
15
CERN Renounces RHEL in Favor of Debian
CERN will move its 2,200-machine accelerator-control fleet from Red Hat-derived distributions to Debian 13, completing the transition by Q4 2026.
8
Hackers Can Turn Vulnerable LiteLLM AI Gateways Into Root Access and Cloud Credential Theft
Wiz found multiple LiteLLM AI gateway flaws, including a CVE-2026-59822 MCP auth bypass added to CISA KEV, enabling root code execution and cloud credential theft.
74
Re: bubblewrap 0.12.0 fixes writes outside sandbox
Red Hat Product Security allocated CVE-2026-87766 for a bubblewrap flaw fixed in 0.12.0 that allowed writes outside the sandbox.
30
August 2026 CVE Landscape
Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.
68
Leaving VMware just got harder after Broadcom pulled VDDK downloads
Broadcom removed public downloads of VMware's VDDK, breaking or complicating migration tools like Azure Migrate, Nutanix Move, and virtv2v.
8
U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog
CISA added six flaws, including actively exploited CVE-2026-8452 in Citrix NetScaler, to its Known Exploited Vulnerabilities catalog with federal patch deadlines.
68
CISA Warns of Six Exploited Flaws in Microsoft, Linux, Red Hat and Citrix Products
CISA added six actively exploited vulnerabilities in Microsoft, Linux, Red Hat and Citrix products to its KEV catalog on August 26.
72
CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs
CISA added six actively exploited flaws to KEV, led by Citrix NetScaler CVE-2026-8452, with federal patch deadlines set.
72
Two alleged TeamPCP hackers arrested over global supply chain attacks
AFP and FBI arrested two alleged TeamPCP hackers behind open-source supply chain attacks that stole 500,000+ credentials from 1,000+ organizations.
78
Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account
Red Hat patched critical Keycloak flaw CVE-2026-18963 (CVSS 9.1) allowing unauthenticated attackers to take over any account, including administrative ones.
78
2026-005: High Vulnerability in the Linux Kernel ("Copy Fail")
Linux kernel flaw CVE-2026-31431 ('Copy Fail', CVSS 7.8) allows unprivileged users to gain root via AF_ALG; a public PoC is out and most distros remain unpatched.
68
Related CVEs
by mentions- CVE-2026-98432<1%9.8Use-after-free in Linux kernel IPv4 TCP options
- CVE-2021-2375883%9.8Unauthenticated .NET Deserialization RCE in Ajax.NET Professional (ajaxpro.2)
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-53266<1%8.8Out-of-Bounds Write in Linux Kernel ebtables SNAT ARP Rewrite (netfilter bridge)
- CVE-2019-106857%8.8Remote Code Execution in Microsoft SQL Server 2016 and 2017
- CVE-2026-84521%8.8Memory Buffer Overflow in Citrix NetScaler ADC/Gateway Exploited in the Wild
- CVE-2022-09959%7.8Out-of-Bounds Write in Linux Kernel watch_queue Enables Local Privilege Escalation
- CVE-2015-32469%7.4Race Condition in Red Hat libuser Allows Local Privilege Escalation
- CVE-2025-399642%5.5Race Condition in Linux Kernel Crypto Socket (af_alg_sendmsg)
- CVE-2026-189635%9.1Unauthenticated Account Takeover via Password Reset Flow in Red Hat Build of Keycloak
Appears with
- Linux kernelproduct · 12
- Microsoftvendor · 9
- CISAorganization · 9
- Red Hat Enterprise Linuxproduct · 7
- SUSEvendor · 7
- Red Hatorganization · 6
- Trivyproduct · 5
- IBMvendor · 4
- Aqua Securityvendor · 4
- Sysdigvendor · 4
- Debianvendor · 4
- Palo Alto Networksvendor · 4
- Oraclevendor · 4
- Snykvendor · 4
- Ciscovendor · 4
- Prisma Cloudproduct · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.