Ubuntu releases fixes for critical Linux kernel RCE vulnerability
Original title: Ubuntu Releases Security Fixes for Critical Linux Kernel Vulnerability Allowing Remote Code Execution
CVE-2026-98432 use-after-free in IPv4 TCP handling fixed in proposed updates for Ubuntu 22.04 and newer.
Ubuntu published security fixes for CVE-2026-98432, a critical Linux kernel flaw allowing remote code execution. The vulnerability is a use-after-free in tcp_v4_syn_recv_sock(). Fixes use kfree_rcu() and are available in -proposed pocket for 22.04 and newer releases.
- CVSS 3.1 score of 9.8
- Affects 16.04, 18.04, 20.04, 22.04, 24.04, 26.04
- Exploit from Anthropic still unreleased
- No IPv6 impact in the reported issue
Impact: remote code execution
- 1.upgrade to -proposed kernel
- 2.enable -proposed pocket with apt
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-98432 | Use-after-free in Linux kernel IPv4 TCP options | 9.8 | <1% | PoC ×25 |
From the original article
2 min read at gbhackers.com
Ubuntu has published fixes for CVE-2026-98432, a critical Linux kernel flaw in IPv4 TCP connection handling. It carries a CVSS 3. 1 score of 9.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.