The Linux kernel's MPTCP protocol has a critical vulnerability that allows remote root access.
Claims
The Linux kernel's MPTCP protocol has a critical vulnerability that allows remote root access.
Parent: CybersecurityEntity: Linux kernelSub-entity: MPTCP protocolImpact: negativeDate: Oct 30, 2026 - Oct 31, 2026Target: The Linux kernel's MPTCP protocol has a critical vulnerability that allows remote root access.
Source posts
š§ SIGINT // Linux Watch ā 2026-10-30
A 9.8 CVSS use-after-free in kernel TCP, reportedly exploited for root on MPTCP servers, and Ubuntu and RHEL don't have fixes yet. Check whether MPTCP is enabled and disable it if you don't need it, until patches land.
š https://thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html
#Linux #OpenSource #FOSS
0 boosts Ā· 0 favs Ā· 0 replies Ā· Oct 30, 2026
#linux#opensource#foss
š§ SIGINT // Linux Watch ā 2026-10-31
CVE-2026-98432 is a 9.8 TCP use-after-free reaching back to kernel 4.4, with an AI-built exploit giving remote root on MPTCP listeners. Ubuntu and RHEL reportedly lack fixes, so check whether MPTCP is enabled and disable it where you can.
š https://www.bleepingcomputer.com/news/security/critical-linux-kernel-flaw-allows-remote-root-attacks-on-mptcp-servers/
#Linux #OpenSource #FOSS
0 boosts Ā· 0 favs Ā· 0 replies Ā· Oct 31, 2026
#linux#opensource#foss