Description
In the Linux kernel, the following vulnerability has been resolved:
ipv4: free inet_opt and ireq_opt after an RCU grace period
tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the
child socket (newinet->inet_opt) without copying it.
Another cpu can concurrently process a retransmitted SYN for the same
request socket, and send a SYNACK from tcp_check_req().
tcp_v4_send_synack() and inet_csk_route_req() read ireq->ireq_opt
under rcu_read_lock() only, and ip_build_and_send_pkt() and
ip_options_build() then read opt->optlen twice.
Note that the SYNACK timer itself is not an issue: it holds a
reference on its request socket, and inet_csk_reqsk_queue_drop()
calls timer_delete_sync() before the child can be freed.
Since commit 079096f103fa ("tcp/dccp: install syn_recv requests
into ehash table"), request sockets are processed without holding
the listener lock, so nothing prevents the child socket from being
freed while the SYNACK is still being built. TCP child sockets do
not have SOCK_RCU_FREE, and inet_sock_destruct() frees inet_opt
with a plain kfree(), leading to a use-after-free in
ip_options_build().
A similar issue exists with request socket migration
(net.ipv4.tcp_migrate_req=1, or a BPF_SK_REUSEPORT_SELECT_OR_MIGRATE
program). reqsk_timer_handler() clones the request socket with
inet_reqsk_clone(), so that the old request socket and its clone
share the same ireq_opt, then reqsk_migrate_reset() clears the
pointer in the old one. Another cpu holding a reference on the old
request socket can still be using these options (sending a SYNACK,
or creating a child in tcp_v4_syn_recv_sock()) when the clone is
freed, and tcp_v4_reqsk_destructor() also uses a plain kfree().
Readers already use RCU, and other paths replacing inet_opt
(do_ip_setsockopt(), cipso_v4_sock_setattr()...) already use
kfree_rcu(). Use kfree_rcu() in inet_sock_destruct() and
tcp_v4_reqsk_destructor() as well.
IPv6 is not affected by the first issue, because tcp_v6_syn_recv_sock()
duplicates the options. tcp_v6_reqsk_destructor() has the same
migration issue with ipv6_opt, which is only set by CALIPSO. This
will be addressed in a separate patch.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 4.4 | 5.10.272 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 7.2.10-1 | — |
| Debian 13 | linux | 6.12.113-1 | — |
| Debian 12 | linux | 6.1.190-1 | — |
| Debian 12 | linux-6.12 | 6.12.113-1~deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1036.41 | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1104.106 | — |
| Ubuntu 26.10 | linux | 7.3.0-10.10 | — |
| Ubuntu 26.10 | linux-aws +4 | 7.3.0-1004.4 | — |
| Ubuntu 26.10 | linux-azure-fde | 7.3.0-1004.5 | — |
| Ubuntu 26.10 | linux-riscv +1 | 7.3.0-10.10.1 | — |
| Ubuntu 26.04 LTS | linux | 7.0.0-43.43 | USN-9018-1 |
| Ubuntu 26.04 LTS | linux-aws | 7.0.0-1017.18 | USN-9018-1 |
| Ubuntu 26.04 LTS | linux-azure | 7.0.0-1020.21 | USN-9019-1 |
| Ubuntu 26.04 LTS | linux-azure-fde | 7.0.0-1019.19 | USN-9020-1 |
| Ubuntu 26.04 LTS | linux-gcp | 7.0.0-1017.19 | USN-9018-1 |
| Ubuntu 26.04 LTS | linux-gke | 7.0.0-1010.11 | USN-9020-1 |
| Ubuntu 26.04 LTS | linux-ibm +1 | 7.0.0-1018.18 | USN-9018-1 |
| Ubuntu 26.04 LTS | linux-nvidia | 7.0.0-1025.26 | USN-9043-1 |
| Ubuntu 26.04 LTS | linux-nvidia-bos | 7.0.0-2024.25 | USN-9044-1 |
| Ubuntu 26.04 LTS | linux-oracle | 7.0.0-1016.18 | USN-9018-1 |
| Ubuntu 26.04 LTS | linux-raspi | 7.0.0-1023.23 | USN-9021-1 |
| Ubuntu 26.04 LTS | linux-realtime | 7.0.0-43.43.1 | USN-9020-1 |
| Ubuntu 26.04 LTS | linux-riscv | No fix yet | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-149.149 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1069.74 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-aws-7.0 | 7.0.0-1017.18~24.04.1 | USN-9020-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1073.82 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1071.78 | USN-9039-1 |
| Ubuntu 24.04 LTS | linux-azure-fde-7.0 | 7.0.0-1019.19~24.04.1 | USN-9020-1 |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1073.81 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-gcp-7.0 | 7.0.0-1017.19~24.04.1 | USN-9020-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1068.77 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1053.57 | USN-9023-1 |
| Ubuntu 24.04 LTS | linux-hwe-7.0 | 7.0.0-43.43~24.04.1 | USN-9018-2 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1069.70 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-149.149.1 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1067.70 | USN-9024-1 |
| Ubuntu 24.04 LTS | linux-nvidia-7.0 | 7.0.0-1025.26~24.04.1 | USN-9045-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1067.70.1 | USN-9040-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1039.40 | USN-9091-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1067.71 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-oracle-7.0 | 7.0.0-1016.18~24.04.1 | USN-9020-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1068.72 | USN-9025-1 |
| Ubuntu 24.04 LTS | linux-riscv +30 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-riscv-7.0 | 7.0.0-43.43.1~24.04.2 | — |
| Ubuntu 24.04 LTS | linux-vmware | 6.8.0-1010.10 | USN-9022-1 |
Show 19 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux | 5.15.0-203.213 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1120.127 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1069.74~22.04.1 | USN-9024-1 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1126.135 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1073.82~22.04.1 | USN-9026-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1125.134 | — |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1071.78~22.04.1 | USN-9026-1 |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1121.131 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1073.81~22.04.1 | USN-9024-1 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1116.122 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1103.111 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-149.149~22.04.1 | USN-9066-1 |
| Ubuntu 22.04 LTS | linux-ibm | 5.15.0-1114.118 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1069.70~22.04.1 | USN-9024-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1115.121 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1112.117 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-lowlatency | 5.15.0-198.208 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-149.149.1~22.04.1 | USN-9024-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1115.116 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1071.73 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1117.123 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1067.71~22.04.1 | USN-9025-1 |
| Ubuntu 22.04 LTS | linux-raspi | 5.15.0-1113.116 | USN-9029-1 |
| Ubuntu 22.04 LTS | linux-riscv +35 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | 6.8.0-149.149~22.04.2 | — |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2056.58 | USN-9025-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1064.65 | USN-9023-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 +1 | No fix yet | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1112.116 | USN-9027-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1119.128 | USN-9027-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1064.65~22.04.1 | USN-9024-1 |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1069.74+fips1 | USN-9023-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1073.82+fips1 | USN-9022-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1073.81+fips1 | USN-9023-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1120.127+fips1 | USN-9027-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1126.135+fips1 | USN-9027-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-203.213+fips1 | USN-9027-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1121.131+fips1 | USN-9027-1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux +10 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1120.127~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | 5.15.0-1126.135~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1125.134~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1121.131~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 | 5.15.0-203.213~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 +1 | 5.15.0-1114.118~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1115.121~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-lowlatency-hwe-5.15 | 5.15.0-198.208~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1071.73~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1117.123~20.04.1 | USN-9027-1 |
| Ubuntu Pro 18.04 LTS | linux +12 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | linux +7 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | linux-aws +2 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | rv +77 | 6.12.0-211.72.1.el10_2 | RHSA-2026:98608, RHSA-2026:93413 |
| RHEL 9 | rv +75 | 5.14.0-687.64.1.el9_8 | RHSA-2026:93412 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.182.1.rt7.523.el8_10 | RHSA-2026:93415 |
| RHEL 8 | perf +26 | 4.18.0-553.182.1.el8_10 | RHSA-2026:93414 |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Shadow Migration Toolkit 10 | kernel-modules-internal | 6.12.0-211.72.1.el10_2 | RHSA-2026:93413 |
| RHEL 10.0 EUS | rv +77 | 6.12.0-55.117.1.el10_0 | RHSA-2026:94508 |
| RHEL 9.6 EUS | rv +77 | 5.14.0-570.154.1.el9_6 | RHSA-2026:94438 |
| RHEL 9.4 E4S | bpftool | 7.3.0-427.161.1.el9_4 | RHSA-2026:94109 |
| RHEL 9.4 E4S | rv +62 | 5.14.0-427.161.1.el9_4 | RHSA-2026:94109 |
| RHEL 9.2 E4S | bpftool | 7.0.0-284.202.1.el9_2 | RHSA-2026:94477 |
| RHEL 9.2 E4S | kernel-rt +14 | 5.14.0-284.202.1.rt14.487.el9_2 | RHSA-2026:94558 |
| RHEL 9.2 E4S | perf +47 | 5.14.0-284.202.1.el9_2 | RHSA-2026:94477 |
| RHEL 8.8 TUS | perf +17 | 4.18.0-477.178.1.el8_8 | RHSA-2026:94303 |
| RHEL 8.8 E4S | perf +18 | 4.18.0-477.178.1.el8_8 | RHSA-2026:94303 |
| RHEL 8.6 EUS Long Life | perf +17 | 4.18.0-372.227.1.el8_6 | RHSA-2026:94996 |
| RHEL 8.6 AUS | perf +17 | 4.18.0-372.227.1.el8_6 | RHSA-2026:94996 |
| RHEL 8.4 EUS Long Life | perf +17 | 4.18.0-305.218.1.el8_4 | RHSA-2026:94623 |
| RHEL 8.4 AUS | perf +17 | 4.18.0-305.218.1.el8_4 | RHSA-2026:94623 |
| Red Hat Enterprise Linux Nvidia 10 | rv +41 | 6.12.0-265.31.el10nv | RHSA-2026:93775 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | rv +74 | 6.12.0-211.72.1.el10_2 | ALSA-2026:93413 |
| AlmaLinux 9 | rv +73 | 5.14.0-687.64.1.el9_8 | ALSA-2026:93412 |
| AlmaLinux 8 | kernel-rt +9 | 4.18.0-553.182.1.rt7.523.el8_10 | ALSA-2026:93415 |
| AlmaLinux 8 | perf +24 | 4.18.0-553.182.1.el8_10 | ALSA-2026:93414 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | kernel | 6.12.0-211.72.1.el10_2 | RLSA-2026:93413 |
| Rocky Linux 9 | kernel | 5.14.0-687.64.1.el9_8 | RLSA-2026:93412 |
| Rocky Linux 8 | kernel | 4.18.0-553.182.1.el8_10 | RLSA-2026:93414 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +7 | 6.4.0-150700.53.90.1 | SUSE-SU-2026:5091-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.90.1.150700.17.51.1 | SUSE-SU-2026:5091-1 |
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.143.1 | SUSE-SU-2026:4934-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.143.1.150600.12.66.3 | SUSE-SU-2026:4934-1 |
| SLES 15 SP5 | kernel-64kb +6 | 5.14.21-150500.55.195.1 | SUSE-SU-2026:4936-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.195.1.150500.6.91.1 | SUSE-SU-2026:4936-1 |
| SLES 15 SP4 | kernel-64kb +6 | 5.14.21-150400.24.246.1 | SUSE-SU-2026:4937-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.246.1.150400.24.124.1 | SUSE-SU-2026:4937-1 |
| SLES 12 SP5 | kernel-syms +2 | 4.12.14-122.339.1 | SUSE-SU-2026:5121-1 |
Show 18 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-64kb +8 | 6.12.0-160000.40.1 | SUSE-SU-2026:24446-1 |
| SLES for SAP 16.0 | kernel-default-base | 6.12.0-160000.40.1.160000.2.29 | SUSE-SU-2026:24446-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_0 | 21-160000.4.3 | SUSE-SU-2026:24672-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_1 | 19-160000.1.1 | SUSE-SU-2026:24678-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_12 +1 | 8-160000.1.1 | SUSE-SU-2026:24679-1, SUSE-SU-2026:24664-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_13 | 8-160000.1.2 | SUSE-SU-2026:24668-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_15 | 6-160000.1.1 | SUSE-SU-2026:24681-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_16 | 5-160000.1.1 | SUSE-SU-2026:24666-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_17 +1 | 2-160000.1.1 | SUSE-SU-2026:24673-1, SUSE-SU-2026:24665-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_2 | 17-160000.1.1 | SUSE-SU-2026:24671-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_3 | 16-160000.1.1 | SUSE-SU-2026:24677-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_4 | 15-160000.1.1 | SUSE-SU-2026:24670-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_5 | 14-160000.1.1 | SUSE-SU-2026:24676-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_6 | 13-160000.1.1 | SUSE-SU-2026:24667-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_7 | 12-160000.1.1 | SUSE-SU-2026:24680-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_8 | 11-160000.1.1 | SUSE-SU-2026:24675-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_9 +2 | 10-160000.1.1 | SUSE-SU-2026:24674-1, SUSE-SU-2026:24669-1, SUSE-SU-2026:24663-1 |
| SLES for SAP 15 SP6 | kernel-default-base | 6.4.0-150600.23.143.1.150600.12.66.3 | SUSE-SU-2026:4934-1 |
| SLES for SAP 15 SP6 | kernel-docs +4 | 6.4.0-150600.23.143.1 | SUSE-SU-2026:4934-1 |
| SLES for SAP 15 SP5 | kernel-default-base | 5.14.21-150500.55.195.1.150500.6.91.1 | SUSE-SU-2026:4936-1 |
| SLES for SAP 15 SP5 | kernel-docs +4 | 5.14.21-150500.55.195.1 | SUSE-SU-2026:4936-1 |
| SLES for SAP 15 SP4 | kernel-default-base | 5.14.21-150400.24.246.1.150400.24.124.1 | SUSE-SU-2026:4937-1 |
| SLES for SAP 15 SP4 | kernel-docs +4 | 5.14.21-150400.24.246.1 | SUSE-SU-2026:4937-1 |
| SLES 16.0 | kernel-64kb +8 | 6.12.0-160000.40.1 | SUSE-SU-2026:24446-1, SUSE-SU-2026:24437-1 |
| SLES 16.0 | kernel-default-base | 6.12.0-160000.40.1.160000.2.29 | SUSE-SU-2026:24446-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_0 | 21-160000.4.3 | SUSE-SU-2026:24672-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_1 | 19-160000.1.1 | SUSE-SU-2026:24678-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_12 +1 | 8-160000.1.1 | SUSE-SU-2026:24679-1, SUSE-SU-2026:24664-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_13 | 8-160000.1.2 | SUSE-SU-2026:24668-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_15 | 6-160000.1.1 | SUSE-SU-2026:24681-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_16 | 5-160000.1.1 | SUSE-SU-2026:24666-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_17 +1 | 2-160000.1.1 | SUSE-SU-2026:24673-1, SUSE-SU-2026:24665-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_2 | 17-160000.1.1 | SUSE-SU-2026:24671-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_3 | 16-160000.1.1 | SUSE-SU-2026:24677-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_4 | 15-160000.1.1 | SUSE-SU-2026:24670-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_5 | 14-160000.1.1 | SUSE-SU-2026:24676-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_6 | 13-160000.1.1 | SUSE-SU-2026:24667-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_7 | 12-160000.1.1 | SUSE-SU-2026:24680-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_8 | 11-160000.1.1 | SUSE-SU-2026:24675-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_9 +2 | 10-160000.1.1 | SUSE-SU-2026:24674-1, SUSE-SU-2026:24669-1, SUSE-SU-2026:24663-1 |
| SLE Micro 6.2 | kernel-default-base | 6.12.0-160000.40.1.160000.2.29 | SUSE-SU-2026:24422-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16-RT_Update_0 | 19-160000.3.4 | SUSE-SU-2026:24538-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16-RT_Update_1 | 18-160000.1.1 | SUSE-SU-2026:24537-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_0 | 21-160000.4.3 | SUSE-SU-2026:24630-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_1 | 19-160000.1.1 | SUSE-SU-2026:24636-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_12 +4 | 8-160000.1.1 | SUSE-SU-2026:24637-1, SUSE-SU-2026:24621-1, SUSE-SU-2026:24526-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_13 | 8-160000.1.2 | SUSE-SU-2026:24626-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_15 +1 | 6-160000.1.1 | SUSE-SU-2026:24639-1, SUSE-SU-2026:24523-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_16 +1 | 5-160000.1.1 | SUSE-SU-2026:24623-1, SUSE-SU-2026:24522-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_17 +3 | 2-160000.1.1 | SUSE-SU-2026:24631-1, SUSE-SU-2026:24622-1, SUSE-SU-2026:24521-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_2 | 17-160000.1.1 | SUSE-SU-2026:24629-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_3 +1 | 16-160000.1.1 | SUSE-SU-2026:24635-1, SUSE-SU-2026:24536-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_4 +2 | 15-160000.1.1 | SUSE-SU-2026:24628-1, SUSE-SU-2026:24535-1, SUSE-SU-2026:24533-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_5 +1 | 14-160000.1.1 | SUSE-SU-2026:24634-1, SUSE-SU-2026:24534-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_6 +1 | 13-160000.1.1 | SUSE-SU-2026:24624-1, SUSE-SU-2026:24532-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_7 +1 | 12-160000.1.1 | SUSE-SU-2026:24638-1, SUSE-SU-2026:24531-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_8 +1 | 11-160000.1.1 | SUSE-SU-2026:24633-1, SUSE-SU-2026:24530-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_9 +5 | 10-160000.1.1 | SUSE-SU-2026:24632-1, SUSE-SU-2026:24627-1, SUSE-SU-2026:24620-1 |
| SLE Micro 6.2 | kernel-rt +5 | 6.12.0-160000.40.1 | SUSE-SU-2026:24422-1, SUSE-SU-2026:24386-1 |
| SLE Micro 6.1 | kernel-default-base | 6.4.0-159998.55.1.159998.21.41 | SUSE-SU-2026:24619-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_13 +1 | 15-1.1 | SUSE-SU-2026:24589-1, SUSE-SU-2026:24588-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_22 | 9-1.2 | SUSE-SU-2026:24590-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_12 | 19-1.1 | SUSE-SU-2026:24564-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_13 | 17-1.1 | SUSE-SU-2026:24576-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_14 | 15-1.2 | SUSE-SU-2026:24577-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_16 +1 | 14-1.1 | SUSE-SU-2026:24587-1, SUSE-SU-2026:24575-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_17 +1 | 13-1.1 | SUSE-SU-2026:24586-1, SUSE-SU-2026:24578-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_18 +1 | 12-1.1 | SUSE-SU-2026:24593-1, SUSE-SU-2026:24568-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_19 +1 | 10-1.1 | SUSE-SU-2026:24592-1, SUSE-SU-2026:24565-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_20 +5 | 9-1.1 | SUSE-SU-2026:24591-1, SUSE-SU-2026:24585-1, SUSE-SU-2026:24574-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_24 +1 | 8-1.1 | SUSE-SU-2026:24595-1, SUSE-SU-2026:24572-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_25 +1 | 7-1.1 | SUSE-SU-2026:24584-1, SUSE-SU-2026:24562-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_26 +3 | 6-1.1 | SUSE-SU-2026:24594-1, SUSE-SU-2026:24583-1, SUSE-SU-2026:24563-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_28 +1 | 5-1.1 | SUSE-SU-2026:24582-1, SUSE-SU-2026:24566-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_29 +1 | 3-1.1 | SUSE-SU-2026:24581-1, SUSE-SU-2026:24571-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_30 +1 | 2-159998.1.1 | SUSE-SU-2026:24570-1, SUSE-SU-2026:24569-1 |
| SLE Micro 6.1 | kernel-source +2 | 6.4.0-159998.55.1 | SUSE-SU-2026:24619-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-159998.55.1.159998.21.42 | SUSE-SU-2026:24550-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_13 +1 | 15-1.1 | SUSE-SU-2026:24500-1, SUSE-SU-2026:24499-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_22 | 9-1.2 | SUSE-SU-2026:24503-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_12 | 19-1.1 | SUSE-SU-2026:24488-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_13 | 17-1.1 | SUSE-SU-2026:24509-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_14 | 15-1.2 | SUSE-SU-2026:24508-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_16 +1 | 14-1.1 | SUSE-SU-2026:24507-1, SUSE-SU-2026:24498-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_17 +1 | 13-1.1 | SUSE-SU-2026:24512-1, SUSE-SU-2026:24497-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_18 +1 | 12-1.1 | SUSE-SU-2026:24506-1, SUSE-SU-2026:24490-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_19 +1 | 10-1.1 | SUSE-SU-2026:24505-1, SUSE-SU-2026:24489-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_20 +5 | 9-1.1 | SUSE-SU-2026:24504-1, SUSE-SU-2026:24502-1, SUSE-SU-2026:24496-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_24 +1 | 8-1.1 | SUSE-SU-2026:24511-1, SUSE-SU-2026:24495-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_25 +1 | 7-1.1 | SUSE-SU-2026:24486-1, SUSE-SU-2026:24483-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_26 +3 | 6-1.1 | SUSE-SU-2026:24510-1, SUSE-SU-2026:24487-1, SUSE-SU-2026:24485-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_28 +1 | 5-1.1 | SUSE-SU-2026:24491-1, SUSE-SU-2026:24481-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_29 +1 | 3-1.1 | SUSE-SU-2026:24501-1, SUSE-SU-2026:24480-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_30 +1 | 2-159998.1.1 | SUSE-SU-2026:24494-1, SUSE-SU-2026:24493-1 |
| SLE Micro 6.0 | kernel-source +2 | 6.4.0-159998.55.1 | SUSE-SU-2026:24550-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.195.1.150500.6.91.1 | SUSE-SU-2026:4936-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.167.2 | SUSE-SU-2026:4938-1 |
| SLE Micro 5.5 | kernel-source +1 | 5.14.21-150500.55.195.1 | SUSE-SU-2026:4936-1 |
| SLE Micro 5.4 | kernel-default-base | 5.14.21-150400.24.246.1.150400.24.124.1 | SUSE-SU-2026:4937-1 |
| SLE Micro 5.4 | kernel-rt +1 | 5.14.21-150400.15.192.2 | SUSE-SU-2026:4939-1 |
| SLE Micro 5.4 | kernel-source +1 | 5.14.21-150400.24.246.1 | SUSE-SU-2026:4937-1 |
| SLE Micro 5.3 | kernel-default-base | 5.14.21-150400.24.246.1.150400.24.124.1 | SUSE-SU-2026:4937-1 |
| SLE Micro 5.3 | kernel-source +1 | 5.14.21-150400.24.246.1 | SUSE-SU-2026:4937-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.90.1 | SUSE-SU-2026:5091-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_12 | 11-150700.2.1 | SUSE-SU-2026:4984-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_6 | 16-150700.2.1 | SUSE-SU-2026:4969-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_19 | 6-150700.2.1 | SUSE-SU-2026:5059-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_20 +1 | 5-150700.2.1 | SUSE-SU-2026:5058-1, SUSE-SU-2026:5020-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_21 +1 | 3-150700.2.1 | SUSE-SU-2026:5085-1, SUSE-SU-2026:4960-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_24 | 1-150700.15.3.1 | SUSE-SU-2026:5091-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.143.1 | SUSE-SU-2026:4934-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_27 | 8-150600.2.1 | SUSE-SU-2026:5016-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_29 | 6-150600.2.1 | SUSE-SU-2026:5053-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_30 | 5-150600.2.1 | SUSE-SU-2026:5055-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_32 | 2-150600.2.1 | SUSE-SU-2026:5107-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_33 | 1-150600.13.5.1 | SUSE-SU-2026:4934-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.195.1 | SUSE-SU-2026:4936-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_31 | 19-150500.2.1 | SUSE-SU-2026:4977-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_32 +1 | 16-150500.2.1 | SUSE-SU-2026:5012-1, SUSE-SU-2026:4983-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_35 | 15-150500.2.1 | SUSE-SU-2026:4978-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_47 | 1-150500.11.3.1 | SUSE-SU-2026:4936-1 |
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.246.1 | SUSE-SU-2026:4937-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_59 +1 | 2-150400.2.1 | SUSE-SU-2026:5107-1, SUSE-SU-2026:5084-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_61 | 1-150400.9.3.1 | SUSE-SU-2026:4937-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.339.1 | SUSE-SU-2026:5121-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_73 | 18-2.1 | SUSE-SU-2026:4979-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_75 | 16-2.1 | SUSE-SU-2026:4972-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_82 +1 | 9-2.1 | SUSE-SU-2026:5052-1, SUSE-SU-2026:5019-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_84 | 7-2.1 | SUSE-SU-2026:5048-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_85 | 6-2.1 | SUSE-SU-2026:5034-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_86 | 5-2.1 | SUSE-SU-2026:5086-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_87 | 2-2.1 | SUSE-SU-2026:5088-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_90 | 1-8.3.1 | SUSE-SU-2026:5121-1 |
| SLE HPC 15 SP5 | kernel-64kb +5 | 5.14.21-150500.55.195.1 | SUSE-SU-2026:4936-1 |
| SLE HPC 15 SP5 | kernel-default-base | 5.14.21-150500.55.195.1.150500.6.91.1 | SUSE-SU-2026:4936-1 |
| SLE HPC 15 SP4 | kernel-64kb +5 | 5.14.21-150400.24.246.1 | SUSE-SU-2026:4937-1 |
| SLE HPC 15 SP4 | kernel-default-base | 5.14.21-150400.24.246.1.150400.24.124.1 | SUSE-SU-2026:4937-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | rclone | 1.76.0-1.1 | openSUSE-SU-2026:12505-1 |
| openSUSE Leap 16.1 | kernel-default-base | 6.12.0-160100.9.1.160100.3.14 | openSUSE-SU-2026:22309-1 |
| openSUSE Leap 16.1 | kernel-nvidia64kb +2 | 6.12.0-160100.6.1 | openSUSE-SU-2026:22313-1 |
| openSUSE Leap 16.1 | kernel-rt +11 | 6.12.0-160100.9.1 | openSUSE-SU-2026:22309-1 |
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.40.1.160000.2.29 | openSUSE-SU-2026:22167-1 |
| openSUSE Leap 16.0 | kernel-livepatch-SLE16_Update_18 +1 | 2-160000.1.1 | openSUSE-SU-2026:22243-1, openSUSE-SU-2026:22235-1 |
| openSUSE Leap 16.0 | kernel-rt +11 | 6.12.0-160000.40.1 | openSUSE-SU-2026:22167-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.1.189-236.400 +2 | 1:1.0-0.amzn2023 | ALAS2023-2026-3365, ALAS2023-2026-3335, ALAS2023-2026-3251 |
| Amazon Linux 2023 | perf +12 | 1:6.1.189-236.400.amzn2023 | ALAS2023-2026-3365 |
| Amazon Linux 2023 | perf6.12 +11 | 1:6.12.113-138.209.amzn2023 | ALAS2023-2026-3335 |
| Amazon Linux 2023 | perf6.18 +12 | 1:6.18.56-125.164.amzn2023 | ALAS2023-2026-3251 |
| Amazon Linux 2 | kernel-livepatch-4.14.355-287.758 | 1.0-0.amzn2 | ALAS2-2026-4065 |
| Amazon Linux 2 | perf +8 | 4.14.355-287.758.amzn2 | ALAS2-2026-4065 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.159.1-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | rv +29 | 6.12.0-211.72.1.el10_2 | ELSA-2026-93413 |
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-207.111.5.4.el10uek | ELSA-2026-500572, ELSA-2026-500399 |
| Oracle Linux 9 | rv +28 | 5.14.0-687.64.1.el9_8 | ELSA-2026-93412 |
| Oracle Linux 8 | kernel-uek +17 | 5.15.0-325.221.6.4.el9uek | ELSA-2026-500574, ELSA-2026-500398 |
| Oracle Linux 8 | perf +19 | 4.18.0-553.182.1.el8_10 | ELSA-2026-500574, ELSA-2026-500398, ELSA-2026-93414 |
| Oracle Linux 7 | kernel-uek +6 | 5.4.17-2136.360.3.1.el8uek | ELSA-2026-500573, ELSA-2026-500397 |
| Oracle Linux 7 | kernel-uek-tools | 5.4.17-2136.360.3.1.el7uek | ELSA-2026-500573, ELSA-2026-500397 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 83 repositories · most starred shown
-
tc4dy/CVE-2026-98432-PoC-Exploit ★ 43 · Oct 30, 2026
CVE-2026-98432 (CVSS 9.8) Linux IPv4 TCP use-after-free Red/Blue team toolkit. Kernel exposure checks, live marker-based race proof, KASLR slide recovery from captures, pcap analysis, and one-shot ho…
-
Alucard0x1/cve-2026-98432 ★ 31 · Oct 30, 2026
Proof-only PoC for CVE-2026-98432 (Linux IPv4/TCP ireq_opt use-after-free): race trigger, heap-reuse oracle, no code execution
-
H1z3-br0/CVE-2026-98432 ★ 18 · Oct 30, 2026
Race trigger, heap-reuse oracle, pcap analysis, detection and mitigation tooling for CVE-2026-98432 (Linux IPv4/TCP ireq_opt use-after-free).
-
xen0bit/netprobe-cve-2026-98432 ★ 18 · Oct 30, 2026
You should patch, but not worry about CVE-2026-98432
-
ylh440104/cve-2026-98432-chain ★ 15 · Nov 10, 2026
CVE-2026-98432 exploitation notes and stage skeletons (all kernel offsets redacted)
-
typhoon1217/cve-2026-98432-mitigation ★ 12 · Oct 29, 2026
Temporary mitigation for CVE-2026-98432 (Linux IPv4 TCP ireq_opt use-after-free): drop IPv4 TCP with IP options, disable MPTCP. Tested scripts + verification. EN/KO.
-
googlesky/CVE-2026-98432 ★ 9 · Oct 31, 2026
PoC for CVE-2026-98432 (Linux kernel IPv4 TCP inet_opt/ireq_opt use-after-free, CVSS 9.8): KASAN-verified UAF reproduction in inet_csk_route_req with A/B fixed-kernel control
-
akamai/cve-2026-98432-validation-mitigation ★ 9 · Oct 30, 2026
Read-only patch-state and exposure check for CVE-2026-98432 (Linux kernel IPv4 TCP use-after-free, CVSS 9.8), with opt-in interim mitigation and exact rollback.
-
AronWang001/linux-cve-2026-98432-fix ★ 4 · Oct 31, 2026
Detect CVE-2026-98432 on the running Linux kernel and apply the official fixed kernel only on verified distributions (Debian 12/13, Amazon Linux 2/2023). Ubuntu/RHEL detect-only; Rocky/Alma/Oracle/Fe…
-
mahdi-salmanzade/CVE-2026-98432 ★ 4 · Oct 30, 2026
CVE-2026-98432 (Linux IPv4 TCP use-after-free): how to check your server, apply a stopgap, and clean up after the fix
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 50
- openSUSE-SU-2026:22313-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Nov 14, 2026
- openSUSE-SU-2026:22309-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Nov 14, 2026
- RHSA-2026:98608 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:94996 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:94558 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:94623 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:94508 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:94438 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:94477 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:94303 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:94109 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:93775 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:93414 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:93413 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:93415 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:93412 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- USN-9091-1 linux-nvidia-tegra vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9027-2 linux-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9020-1 linux-aws-7.0, linux-azure-fde, linux-azure-fde-7.0, linux-gcp-7.0, linux-gke, linux-oracle-7.0, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9022-1 linux, linux-aws, linux-azure, linux-azure-fips, linux-gcp, linux-gke, linux-ibm, linux-lowlatency, linux-oracle, linux-vmware vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9025-1 linux-oracle-6.8, linux-raspi, linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9024-1 linux-aws-6.8, linux-gcp-6.8, linux-ibm-6.8, linux-lowlatency-hwe-6.8, linux-nvidia, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9023-1 linux-aws-fips, linux-gcp-fips, linux-gkeop, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9026-1 linux-azure-6.8, linux-azure-fde-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9021-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9039-1 linux-azure-fde vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9029-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9040-1 linux-nvidia-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9066-1 linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9019-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9043-1 linux-nvidia vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9018-2 linux-hwe-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- WID-SEC-2026-4008 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- USN-9044-1 linux-nvidia-bos vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-9045-1 linux-nvidia-7.0 vulnerability Ubuntu Security Notices (USN) · Nov 12, 2026
- SUSE-SU-2026:24681-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24679-1 Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24680-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24678-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24675-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24667-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24674-1 Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24671-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24673-1 Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24672-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24670-1 Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24676-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24668-1 Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24677-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:24669-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Nov 12, 2026
References
- https://git.kernel.org/stable/c/b3b027ef0cd322bfa839b9aaf5b27551eea54cf6
- https://git.kernel.org/stable/c/95a8c8fa9f27dce64c40c41c062de7728bf34ab5
- https://git.kernel.org/stable/c/89b5b1eb7d633c33832b7ff2c02e19a144705036
- https://git.kernel.org/stable/c/742f73df544e03744f2981c467d6542fe8172a2a
- https://git.kernel.org/stable/c/11a03ce3c4a62d84c10ccdfe47f8075006498568
- https://git.kernel.org/stable/c/a47406c769f72c070386985488f1c4d057df86b2
- https://git.kernel.org/stable/c/26d4c36d318cffbbd160884a0e4cec0da4da4936
- https://git.kernel.org/stable/c/e3f33b0a1d89d738e2b913dab519226eaf76e15b