Is CVE-2026-98432 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-98432

Users should update to the latest kernel versions from their distribution maintainers. Ubuntu and Red Hat Enterprise Linux users should apply security updates through their respective package managers. Standard kernel update procedures apply. Monitor official Linux kernel CVE databases and distribution security advisories for patch availability. Apply network segmentation and firewall rules to limit remote access to critical systems until patches are applied.

Quick answers

What is CVE-2026-98432?: Users should update to the latest kernel versions from their distribution maintainers. Ubuntu and Red Hat Enterprise Linux users should apply security updates through their respective package managers. Standard kernel update procedures apply. Monitor official Linux kernel CVE databases and distribution security advisories for patch availability. Apply network segmentation and firewall rules to limit remote access to critical systems until patches are applied.
How severe is CVE-2026-98432?: critical, CVSS 9.8
Is CVE-2026-98432 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-98432 be mitigated?: Users should update to the latest kernel versions from their distribution maintainers. Ubuntu and Red Hat Enterprise Linux users should apply security updates through their respective package managers. Standard kernel update procedures apply. Monitor official Linux kernel CVE databases and distribution security advisories for patch availability. Apply network segmentation and firewall rules to limit remote access to critical systems until patches are applied.

CVSS

9.8

Vendor

Ubuntu

Published

Oct 31, 2026 · 01:24

Patch

Unknown / not confirmed

Affected products

Linux Kernel

Mitigation

Critical Linux Kernel TCP Vulnerability CVE-2026-98432 Exposed with 9.8 CVSS Score

A critical vulnerability in the Linux kernel's TCP implementation, tracked as CVE-2026-98432, has been assigned a CVSS score of 9.8. The flaw allows a remote attacker with no credentials to execute commands as root on affected Linux servers. Anthropic reported on October 27, 2026, that its AI model developed an exploit for this vulnerability. The Linux kernel's own CVE team rates the severity at 9.8 out of 10. Affected distributions include Ubuntu and Red Hat Enterprise Linux, with other Linux distributions potentially impacted.

12m

CVE-2026-98432

Quick answers

Related News

Critical Linux Kernel TCP Vulnerability CVE-2026-98432 Exposed with 9.8 CVSS Score