Linux kernel TCP use-after-free CVE-2026-98432 can crash Ubuntu
Ubuntu lists kernels through 22.04 LTS as affected, with fixes still in progress and no confirmed exploitation.
64
Vendor
Ubuntu
- Mentions · 7d4
- Mentions · 30d49
- All mentions111
- First seenSep 7, 2026
- Last mentioned19h ago
Timeline
111 articles · newest firstLinux TCP use-after-free scored 9.8; Ubuntu and RHEL unfixed
Anthropic says Claude built a remote root exploit via MPTCP, a link absent from the CVE and fix.
76
Ubuntu patches Brotli bug that could crash systems or run code
USN-8956-2 backports the earlier Brotli fix to Ubuntu 16.04 LTS, 18.04 LTS and 20.04 LTS, with no CVE named.
44
Ubuntu authd flaw may expose another user’s local account
USN-8957-1 says identity-provider account matching can be abused for unauthorized access to files.
44
PHP2Shell vulnerabilities patched by multiple vendors
PHP releases 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix CVE-2026-109618 and CVE-2026-109619 allowing unauthenticated remote code execution.
80
Ubuntu patches libsoup3 flaws on 26.10 in USN-8890-2
The notice backports earlier libsoup fixes, including an HTTP/2 denial of service and an HTTPS proxy information leak.
42
Ubuntu c-ares flaws can crash the library or run code
SOA reply parsing can crash c-ares on Ubuntu 16.04 LTS and 18.04 LTS; a sortlist bug can run code on 16.04.
32
Ubuntu NSS update removes two root CAs after intermediate compromise
The notice drops emSign ECC Root CA - G3 and the Comodo AAA Services root from NSS.
46
Ubuntu 26.10 U-Boot update fixes NFS and HTTP flaws
Malformed NFS responses can overflow buffers for denial of service or code execution; an lwIP HTTP bug can use-after-free.
58
USN-8948-2 backports PHP code-execution fixes to older Ubuntu
CVE-2026-109618 and CVE-2026-109619 can let a remote attacker run code while PHP handles requests.
58
Ubuntu: PHP request-handling bugs allow remote code execution
One bug mishandles out-of-memory cleanup; the other reuses internal request state across PHP workers.
84
Ubuntu fixes Unbound denial-of-service flaws in USN-8946-1
Crafted TCP connections or DNS responses can exhaust resources or crash Unbound; fixed package versions are not in the excerpt.
42
Ubuntu removes emSign and Comodo root CAs on older LTS
USN-8944-2 drops both roots on Ubuntu 14.04, 16.04, 18.04, and 20.04 LTS after compromised emSign intermediates.
42
Ubuntu removes emSign ECC Root CA - G3 after CA compromise
22.04, 24.04 and 26.04 LTS also refresh ca-certificates to the Mozilla 2.90 authority bundle.
54
Ubuntu 26.10 sudo-rs update fixes sudoedit race (USN-8708-2)
A local user allowed to sudoedit specific files could write files elsewhere and possibly gain higher privileges.
44
Ubuntu fixes denial-of-service flaw in Perl XS::Parse::Keyword
Crafted input to the module can crash a user or automated system that processes it; no fixed version is named.
34
Ubuntu fixes libXtst denial-of-service flaws from malicious X servers
CVE-2026-94286 can crash libXtst clients; CVE-2016-7951 is an out-of-bounds issue limited to Ubuntu 16.04 LTS.
32
Ubuntu 26.10 curl update fixes WebSocket read and reuse bugs
USN-8927-2 backports fixes for an out-of-bounds read and a connection-reuse flaw, CVE-2026-107928 and CVE-2026-107929.
36
cifs-utils credential-file flaw can escalate local privileges
A local attacker may inject arbitrary mount options into privileged mount.cifs calls. Ubuntu notice USN-8938-1 covers the issue.
36
USN-8932-1: curl vulnerabilities
Ubuntu patched curl flaws that could leak AWS SigV4 state or proxy credentials.
48
USN-8925-1: YAML-LibYAML vulnerabilities
Ubuntu patched YAML-LibYAML flaws that could delete files or run code on 16.04 and 18.04 LTS.
28
USN-8908-2: BlueZ regression
Ubuntu's USN-8908-2 fixes a BlueZ A2DP regression that stopped Bluetooth audio devices from reconnecting automatically.
26
USN-8924-1: Linux kernel vulnerabilities
Ubuntu patches old Linux kernel flaws that leak PIDs or crash via malicious XFS and f2fs images.
22
USN-8913-1: libx11 vulnerabilities
Ubuntu patched libX11 flaws that let a malicious X server crash clients or possibly run code.
36
USN-8911-1: Linux kernel (OEM) vulnerabilities
Ubuntu patched multiple Linux kernel OEM flaws that could let attackers compromise affected systems.
34
USN-8909-1: libde265 vulnerability
Ubuntu warns libde265 can crash on crafted H.265 bitstreams via a NULL pointer dereference.
22
USN-8907-1: libgit2 vulnerability
Ubuntu warns libgit2 TLS IP certificate checks can enable a machine-in-the-middle attack.
36
USN-8904-1: Linux kernel (Azure) vulnerabilities
Ubuntu's USN-8904-1 patches multiple Azure Linux kernel flaws that could let an attacker compromise the system.
28
USN-8903-1: Linux kernel vulnerabilities
Ubuntu's USN-8903-1 fixes multiple Linux kernel flaws across architectures and drivers that could allow system compromise.
26
USN-8888-2: Linux kernel (Azure) vulnerabilities
Ubuntu patched Azure Linux kernels, including AMD SEV-SNP flaw CVE-2023-20585 that a local hypervisor attacker could abuse.
38
USN-8887-2: Linux kernel (AWS) vulnerabilities
Ubuntu's USN-8887-2 patches AWS Linux kernels, including AMD SEV-SNP issue CVE-2023-20585 exploitable by a hypervisor attacker.
38
USN-8893-1: Libwebsockets vulnerabilities
Ubuntu fixed two libwebsockets buffer overflows that could crash systems or run code.
34
USN-8891-1: librsvg vulnerability
Ubuntu reports a librsvg flaw that may allow denial of service or arbitrary code execution.
36
USN-8885-1: FluidSynth vulnerabilities
Ubuntu patched FluidSynth flaws that could crash the synthesizer or allow arbitrary code execution.
34
USN-8886-1: Linux kernel (NVIDIA Tegra) vulnerabilities
Ubuntu patched NVIDIA Tegra Linux kernel flaws that could let an attacker compromise the system.
32
USN-8883-1: Go vulnerability
Ubuntu fixed a Go x/net/idna flaw that can bypass hostname controls via Punycode labels.
51
USN-8882-1: Tesseract vulnerabilities
Ubuntu’s USN-8882-1 fixes Tesseract flaws in crafted .traineddata models that can crash the engine or execute code.
48
USN-8880-1: FreeRDP vulnerabilities
Ubuntu's USN-8880-1 warns FreeRDP flaws could leak data, crash the client, or allow code execution.
46
USN-8874-1: sg3_utils vulnerability
Ubuntu's USN-8874-1 says sg3_utils may run commands via unsanitized device identification data.
36
USN-8875-1: Linux kernel vulnerabilities
Ubuntu patches Linux kernel flaws, including a local null-pointer crash in the i.MX clock driver (CVE-2022-3114).
36
Related CVEs
by mentions- CVE-2025-10263<1%9.1Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 &…
- CVE-2026-53221<1%9.8Linux kernel: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
- CVE-2026-53131<1%9.4Linux kernel: netfilter: require Ethernet MAC header before using eth_hdr() `ip6t_eui64`, `xt_mac`, the `bitmap:ip,mac`…
- CVE-2025-38724<1%7.8Linux kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that…
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-52914<1%9.8Linux kernel: batman-adv: fix fragment reassembly length accounting batman-adv keeps a running payload length for queued…
- CVE-2026-52931<1%9.8Linux kernel: batman-adv: tp_meter: avoid use of uninit sender vars batadv_tp_recv_ack() and batadv_tp_stop() are only…
- CVE-2026-87766<1%8.8Symlink-following sandbox escape (arbitrary file write) in bubblewrap before 0.12.0
- CVE-2026-15534<1%5.7Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch
Appears with
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.