CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation

rvz

This one is quite serious and the type of vulnerability is once again, a C style memory corruption and a race condition combined; leading to an RCE. At this point, we seriously need to discuss whether if the major projects still written in C such as Linux, Chromium and even git can even handle the stream of now near infinite bugs being discovered with AI. Attackers are already rapidly finding and building exploits for those vulnerabilities the moment they are discovered with abliterated frontier-level models. These sort of vulnerabilities are far to common in those projects and in the future, it will be extremely unsafe for even experts to continue using C or C++ in any way.

majorchord

Thankfully the vast majority of servers are not creating MPTCP listeners by default (that I'm aware of). Not sure why the article doesn't mention it, but you can specifically check for MPTCP listeners using `ss -M`.

superkuh

Would dropping these specialized ipv4 syn packets with extra header size beyond 20 bytes (as indicated by options value >5) with the firewall be low enough in the order of things to mitigate the attack? Like, iptables -A INPUT -p tcp --syn -m u32 --u32 "0>>24&0xF=6:15" -j DROP ?

ReDress

I fail to understand / find the gist of this article. Article describes the technical aspects of the bug, how it got handled by different vendors...AI position on it... But, one would always ask themselves, why did the author write this article? That part hasn't been clear to me even after going through much of the article.

drum55

This is a good portion just slop, another 9000 word article that could have been a couple of paragraphs. More text doesn't mean better.

aussieguy1234

Given these types of security bugs that are being found left and right, I reckon there's going to be an uptick in hiring of software engineers to fix them.

cadamsdotcom

Whoever failed to edit this CVE description down owes us all a bunch of our time back Everyone using LLMs needs to stop shipping their first draft.

Rapzid

Cee Vee Eee week ends The buffers overflowing Cancel all your plans

walrus01

The overlaid HTML popup on that page for "Try The World's First Agentic AI Hacker." tool is cancerous and annoying. This should really be a link to a more reputable link for the CVE in question. It doesn't appear until you've read the page for maybe 10-15 seconds, so if you're not seeing it, just wait. It even managed to get past ublock origin, since there's no specific rule for it yet.

snvzz

There's no end to bugs like these in Linux. Millions of Lines of Code can easily hide many, many of these. Code that runs in supervisor mode. None of this can ever affect seL4[0] nor a system built on it, due to its architecture. 0. https://sel4.systems/