Linux before several 5.x–7.x releases affected by CVE-2026-98432
Original title: Linux security advisory (AV26-1108)
Canada’s Cyber Centre urges administrators to review the linked material and apply updates when available.
The Canadian Centre for Cyber Security advisory AV26-1108, dated October 30, 2026, says that as of October 15 Linux is affected by CVE-2026-98432 in kernels before listed 5.10, 5.15, 6.1, 6.6, 6.12, 6.18, 7.2 and 7.3 releases. The notice does not describe the flaw. It points readers to the CVE record and an oss-security forward about protecting against the issue when using Go programs.
Unconfirmed: The advisory does not state the vulnerability’s impact or whether it is being exploited.
- Affected lines are prior to 5.10.272, 5.15.223, 6.1.190 and 6.6.159.
- Also listed: prior to 6.12.113, 6.18.56, 7.2.10 and 7.3.
- The advisory serial number is AV26-1108.
- Users are told to apply necessary updates as they become available.
| Product | Affected |
|---|---|
| Linux kernel | Prior to 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.56, 7.2.10 and 7.3 |
- 1.Review the linked CVE and oss-security notes and apply available Linux updates.
- CVEs
- CVE-2026-98432
- Vendors
- Linux
- Products
- Linux kernel
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-98432 | Use-after-free in Linux kernel IPv4 TCP options | 9.8 | <1% | PoC ×17 |
From the original article
1 min read at cyber.gc.ca
Serial Number: AV26-1108 Date: October 30, 2026 As of October 15, 2026, Linux is affected by a vulnerability in the following product: Linux Prior to 5. 10. 272 Prior 5.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.