Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #7

Critical Linux kernel flaw CVE-2026-98432 draws security attention

Original: 🤖 CVE-2026-98432 (CVSS 9.8, Linux kernel): race condition in IPv4 TCP connection setup causes a use-after-free. Remote u

A newly disclosed vulnerability, CVE-2026-98432, rated CVSS 9.8, affects the Linux kernel: a race condition in IPv4 TCP connection setup triggers a use-after-free, allowing remote unauthenticated attackers to gain root on hosts with an MPTCP listening socket. Discussion notes that Go 1.24+ enables MPTCP by default, widening exposure, and that an exploit was written with Anthropic's Claude. Upstream patches are available.

Why now: A maximum-severity, remotely exploitable kernel bug patched upstream is being widely shared among security practitioners.

Linux kernelCVE-2026-98432GoAnthropicClaude

Open on mastodon →

Evidence

• 🤖 CVE-2026-98432 (CVSS 9.8, Linux kernel): race condition in IPv4 TCP connection setup causes a use-after-free. Remote unauthenticated root on hosts with an MPTCP listening socket — Go 1.24+ enables MPTCP by default. Anthropic's Claude wrote the exploit. Upstream patched;… · cloud@infosec.exchange · 5

API: https://socialmediatrends-api.osmike.com/v1/trends/4378480