A Hacker News poster flagged that Ubuntu has not yet shipped a fix for CVE-2026-98432, a vulnerability rated 9.8 in severity, nearly a week after disclosure. Ubuntu's security tracker still lists the issue as 'work in progress,' though it now includes a suggested mitigation. The poster says they have been relying on manual mitigations in the meantime.
news.ycombinator.com
· 2026-11-06
Anthropic security researchers created a working exploit for CVE-2026-98432, a use-after-free bug in the Linux kernel's IPv4 TCP code rated 9.8/10 in severity. The flaw lets unauthenticated attackers achieve remote root code execution on servers running Multipath TCP listeners, and it also affects ordinary TCP connections across kernels back to version 4.4, including Ubuntu, RHEL and Rocky Linux, though RCE on non-MPTCP servers hasn't been publicly shown.
bleepingcomputer.com
· 2026-10-30
GoKawiil