type: cve · created: 2026-10-30 · updated: 2026-10-30 · tags: [cve] · confidence: medium · severity: critical · affected_sectors: [global] · au_impact: false
A use-after-free race in the Linux kernel's IPv4 TCP connection-setup code, tracked as CVE-2026-98432, is rated 9.8 by the kernel's own CVE team and lets a remote, unauthenticated attacker execute code as root on servers with a multipath TCP (MPTCP) listener.
| Attribute | Detail |
|---|---|
| CVE | CVE-2026-98432 |
| CVSS | 9.8 (CRITICAL) |
| Vendor / product | Not stated |
| Reported | 2026-10-30 |