Linux servers: patch the 9.8-rated TCP kernel flaw now that RHEL and Ubuntu fixes are out
CVE-2026-98432 is a use-after-free in the Linux kernel's IPv4 TCP code that can let a remote attacker run code with no login. Red Hat shipped fixed kernels for RHEL 8, 9 and 10 on November 1, Ubuntu has fixes in testing for 22.04, 24.04 and 26.04, and Amazon Linux, Debian and SUSE patched in October. Update the kernel and reboot.










