CVE-2026-98432: which Linux kernels are still vulnerable

CVE-2026-98432 is a use-after-free vulnerability in the Linux kernel’s IPv4 TCP handshake affecting versions dating back to Linux 4.4. While upstream fixes have been released, major server distributions such as Ubuntu and Red Hat have yet to ship patches. Mitigation strategies include blocking incoming TCP packets with IP options using nftables or disabling MPTCP. Open article →