TechiSeek

VendorsFor Vendors

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Hacker News

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 News

Operators should move to a kernel that carries the upstream fix for CVE-2026-98432, a use-after-free in the IPv4 TCP handshake reachable by a remote, unauthenticated peer. The upstream fix is a four-line change, but most servers run a distribution kernel, so the operative constraint is the distro tracker, not the upstream version number.

Implementation details

  • The kernel tracks the half-open handshake in a request socket and creates a full socket once the handshake completes; the flaw sits in that path, before any application sees the connection.
  • The upstream fix is a four-line change, fixed by Eric Dumazet and reviewed by Kuniyuki Iwashima.
  • Distribution kernels carry backported fixes under their own version numbers, so the upstream release number does not identify a patched distro kernel.

Known limitations

  • Alma Linux's fixed kernels are still in testing and its errata do not list them yet.
  • Upstream branches that reached end-of-life before 5.10 get no fix; kernels from 4.4 through 5.4 depend on distribution fixes only.
Read More

Recommended

The AI cost of JavaScript frameworksThe AI cost of JavaScript frameworksHacker News AI agent swarms in Minecraft fail to build civilization, drown in bureaucracyAI agent swarms in Minecraft fail to build civilization, drown in bureaucracyHacker News Pancakes Are Delicious and Data Centers Are for Free StuffPancakes Are Delicious and Data Centers Are for Free StuffThenewstack Web3.Storage: Free Decentralized Storage on FilecoinWeb3.Storage: Free Decentralized Storage on FilecoinThenewstack 4 Ways to Get Your Code Back in Shape After Black Friday4 Ways to Get Your Code Back in Shape After Black FridayThenewstack For Better or Worse, Richard Stallman Returns to the Free Software FoundationFor Better or Worse, Richard Stallman Returns to the Free Software FoundationThenewstack Docs-as-code solutions for API teams: how to choose the right platform in 2026Docs-as-code solutions for API teams: how to choose the right platform in 2026Mintlify 10 best AI observability tools for monitoring and evaluating agents in 202610 best AI observability tools for monitoring and evaluating agents in 2026Mintlify Who Explains the Most? An Analysis of Educational YouTubers - Deepgram Blog ⚡️Who Explains the Most? An Analysis of Educational YouTubers - Deepgram Blog ⚡️Deepgram Calling Your Video Game With Your Phone: Part 1Calling Your Video Game With Your Phone: Part 1Deepgram Build a Presentation Coaching Application with Recall - Deepgram Blog ⚡️Build a Presentation Coaching Application with Recall - Deepgram Blog ⚡️Deepgram Top 3 Use Cases for Speech-to-Text in Gaming - Deepgram Blog ⚡️Top 3 Use Cases for Speech-to-Text in Gaming - Deepgram Blog ⚡️Deepgram New Spanish and Turkish Language Models and Updated General Models - Deepgram Blog ⚡️New Spanish and Turkish Language Models and Updated General Models - Deepgram Blog ⚡️Deepgram Automate Audio Transcription with Zapier + DeepgramAutomate Audio Transcription with Zapier + DeepgramDeepgram Rapid `14 Q1 Growth, 23K+ Customers, 45K+ Instances, 4 Clouds (and 10 Regions)Rapid `14 Q1 Growth, 23K+ Customers, 45K+ Instances, 4 Clouds (and 10 Regions)Redis How Redis is Used in Practice | RedisHow Redis is Used in Practice | RedisRedis A Success Story Worth Sharing: Glide.me and Redis LabsA Success Story Worth Sharing: Glide.me and Redis LabsRedis The 8 Best HubSpot Alternatives in 2026The 8 Best HubSpot Alternatives in 2026Zapier Workato integrations: What's included and when to use ZapierWorkato integrations: What's included and when to use ZapierZapier 6 ways to use the Zapier Zoho CRM integration6 ways to use the Zapier Zoho CRM integrationZapier