Skip to content
NewA calmer, faster ZeroHour
StoryVulnerabilityhighExploited in the wild

Ubuntu tests fixes for critical Linux TCP flaw as others patch

7 sources · 10 articlesFirst reported Updated ()
What's new

November 9: Veeam warned the flaw could disrupt backup appliances and said a patched kernel has been available since November 2, with no active exploitation reported.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

CVE-2026-98432 remains unfixed in Ubuntu’s main repositories, with test kernels available, while Red Hat and Veeam have shipped patches.

CVE-2026-98432 is a CVSS 9.8 use-after-free in the Linux kernel’s IPv4 TCP code that unauthenticated remote attackers can trigger for code execution. Publication was delayed until October 15. Debian and Red Hat shipped fixes; as of November 3, Canonical’s fixes for Ubuntu 22.04 LTS and newer remained in the -proposed pocket, not main repositories. Lobsters first reported Debian’s patch on October 16; a later Lobsters post says October 17. Marcus Hutchins reported scanning on November 2, while GBHackers says an Anthropic exploit remains unreleased and Veeam’s November 9 advisory reports no active exploitation. Veeam says appliance 13.1 components are affected and a patched kernel has been available since November 2.

Key facts
  • CVE-2026-98432 is a remote IPv4 TCP use-after-free rated CVSS 9.8.
  • Ubuntu 22.04, 24.04 and 26.04 fixes remain in -proposed testing.
  • Red Hat shipped fixes for RHEL 8.10, 9.8 and 10.2.
  • GBHackers says the reported issue does not affect IPv6.
  • Veeam fixed package 5.14.0-570.60.1+27.2.el9_6_ciq available since November 2.
Analyze CVE-2026-98432 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Timeline

dated events in the reporting · oldest first
  1. Oct 15, 2026Distributions delayed publication of CVE-2026-98432 until this date. · Lobsters
  2. Oct 16, 2026Debian patched the kernel flaw, per the first report. · Lobsters
  3. Nov 1, 2026Red Hat patched RHEL 8 through 10. · Lobsters
  4. Nov 2, 2026Scanning reported; Veeam patched kernel became available. · Cyber Security News
  5. Nov 3, 2026Ubuntu fixes remained in proposed, not main repositories. · The Hacker News

What each outlet adds

beyond the shared facts
  • Akamai BlogDescribes the flaw as a remote TCP use-after-free and its prerequisites.
  • The Hacker NewsLists Red Hat advisory IDs and fixed RHEL kernel versions.
  • Cyber Security NewsNames Ubuntu proposed kernel builds and reports November 2 scanning.
  • GBHackersSays the Anthropic exploit is unreleased and IPv6 is unaffected.
  • Cyber Security NewsDetails Veeam 13.1 exposure and the November 2 fixed package.
CVEs
CVE-2026-98432
Vendors
VeeamRed HatCanonicalUbuntuLinuxDebianSUSE
Products
Software ApplianceInfrastructure ApplianceBackup & ReplicationLinux kernelUbuntu 22.04Ubuntu 24.04Ubuntu 26.04Linux KernelUbuntuDebian 12RHEL8-10SUSE Leap
Organizations
DebianAnthropic

Coverage

oldest first · one row per article · UTC
  1. · 6d ago Lobsters · securityFirst report

    Ubuntu delays critical Linux kernel TCP vulnerability patch

    Ubuntu has not patched CVE-2026-98432 which allows remote root on servers, despite Debian and others shipping the fix.

  2. · 6d ago Hacker News · security

    Ubuntu LTS kernels lack patch for critical CVE-2026-98432

    No fixed kernels released for Ubuntu 22.04, 24.04 or 26.04 despite CVSS 9.8 rating for CVE-2026-98432, leaving systems exposed for nearly three weeks.

  3. · 6d ago Akamai Blog

    Linux Kernel TCP Stack Remote Use-After-Free Vulnerability

    Akamai reports on CVE-2026-98432, a remote use-after-free flaw in the Linux kernel TCP stack.

  4. · 6d ago Cyber Security News

    Ubuntu Releases Early Fixes for Linux Kernel RCE Flaw

    Ubuntu provides early kernel fixes for CVE-2026-98432 allowing root RCE via use-after-free in TCP connections; attackers scanning in the wild for affected systems.

  5. · 6d ago GBHackers

    Ubuntu releases fixes for critical Linux kernel RCE vulnerability

    CVE-2026-98432 use-after-free in IPv4 TCP handling fixed in proposed updates for Ubuntu 22.04 and newer.

  6. · 6d ago The Hacker News

    Red Hat Patches Critical Linux TCP RCE Flaw CVE-2026-98432

    Red Hat released fixed kernels for RHEL 8, 9 and 10 while Ubuntu keeps updates in testing channel.

  7. · 6d ago Lobsters · security

    Canonical lags in patching critical CVE-2026-98432

    Canonical has not released the fix for CVE-2026-98432 in main Ubuntu repositories despite rapid patching by Debian and Red Hat.

  8. · 3d ago Hacker News · security

    Ubuntu update delayed for critical CVE-2026-98432

    Ubuntu has left critical CVE-2026-98432 unpatched for nearly a week despite a 9.8 severity rating and available mitigation.

  9. · 3d ago BleepingComputer

    Veeam Software Appliance VMs fail to boot on AMD EPYC hosts

    Veeam Software Appliance VMs running on certain AMD EPYC processors intermittently fail to boot after jitterentropy health test failure in FIPS mode.

  10. · 8h ago Cyber Security News

    Veeam warns critical Linux kernel flaw could crash backup appliances

    Veeam identifies use-after-free in Linux kernel affecting backup appliances; patched kernel available for 13.1 versions.

Vulnerabilities in this story

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-98432
Use-after-free in Linux kernel IPv4 TCP options
9.8<1%PoC ×25