Skip to content
OpenAdvisories
Critical 4JXD000117 1 CVE

ABB Ability™ OPTIMAX® Use-after-free - kernel IPv4

Published Nov 11, 2026 · Updated Nov 11, 2026

Vendor: ABB Product: Ability™ OPTIMAX®

Summary

An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory.

An attacker who successfully exploited this vulnerability could cause the product to insert and run arbitrary code.

Vulnerabilities 1

  • Critical 9.8
    CVE-2026-98432 Public exploit

    ipv4: free inet_opt and ireq_opt after an RCU grace period

    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Revision history

  1. #1

    Initial version.

References