← All reports

The Linux kernel's MPTCP protocol has a critical vulnerability that allows remote root access.

CybersecurityLinuxOct 30, 2026score 0.172 posts Ā· 0 replies across 1 instances
The thread discusses a critical Linux kernel vulnerability (CVE-2026-98432) with a high CVSS score, affecting MPTCP servers and allowing remote root access. It highlights that Ubuntu and RHEL have not yet released patches, advising users to disable MPTCP until fixes are available.

Claims

The Linux kernel's MPTCP protocol has a critical vulnerability that allows remote root access.
Parent: CybersecurityEntity: Linux kernelSub-entity: MPTCP protocolImpact: negativeDate: Oct 30, 2026 - Oct 31, 2026Target: The Linux kernel's MPTCP protocol has a critical vulnerability that allows remote root access.

Source posts

@[email protected]
🐧 SIGINT // Linux Watch — 2026-10-30 A 9.8 CVSS use-after-free in kernel TCP, reportedly exploited for root on MPTCP servers, and Ubuntu and RHEL don't have fixes yet. Check whether MPTCP is enabled and disable it if you don't need it, until patches land. šŸ”— https://thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html #Linux #OpenSource #FOSS
0 boosts Ā· 0 favs Ā· 0 replies Ā· Oct 30, 2026
#linux#opensource#foss
@[email protected]
🐧 SIGINT // Linux Watch — 2026-10-31 CVE-2026-98432 is a 9.8 TCP use-after-free reaching back to kernel 4.4, with an AI-built exploit giving remote root on MPTCP listeners. Ubuntu and RHEL reportedly lack fixes, so check whether MPTCP is enabled and disable it where you can. šŸ”— https://www.bleepingcomputer.com/news/security/critical-linux-kernel-flaw-allows-remote-root-attacks-on-mptcp-servers/ #Linux #OpenSource #FOSS
0 boosts Ā· 0 favs Ā· 0 replies Ā· Oct 31, 2026
#linux#opensource#foss