CVE-2026-98432
9.8CVSS base score · critical (NVD)
0.4%Chance of exploitation in the next 30 days (FIRST EPSS)
Not in KEVNo confirmed exploitation in CISA's catalog yet
What happened
Red Hat has released fixes for CVE-2026-98432, a critical use-after-free vulnerability in the Linux kernel's IPv4 TCP code affecting RHEL 8, 9, and 10. The flaw allows unauthenticated remote attackers to execute code. Ubuntu has fixes in its testing channel but no general release date yet. Administrators should prioritize updating Red Hat systems immediately; Ubuntu users should track testing updates closely.
From the Intel60 brief of Nov 3, 2026. AI-written summary: check the sources before acting.
Intel60 briefs
- CriticalLinux TCP RCE flaw patched by Red Hat, Ubuntu testingNov 3, 2026
- CriticalLinux kernel TCP flaw CVE-2026-98432 enables remote root code executionOct 29, 2026