CVE-2026-98432: which Linux kernels are still vulnerable 0 ▲ Mattias Geniar 1 hour ago · Tech · hide · 0 comments CVE-2026-98432 is a use-after-free bug in the Linux kernel’s IPv4 TCP handshake. Anyone who can send a SYN to a listening port can reach it. Your application never sees a single byte. The bug goes back to Linux 4.4. The upstream fix has been out since mid-October. Ubuntu and Red Hat still haven’t shipped one. No comments yet. Log in to reply on the Fediverse. Comments will appear here.