What happened

A security flaw numbered CVE-2026-98432 has surfaced in the Linux kernel's IPv4/TCP networking code. It is rated 9.8 on the CVSS scale, which falls in the critical range.

What is a use-after-free?

A use-after-free bug means a program keeps accessing a memory region after it has been freed. Such flaws can let an attacker corrupt memory or execute code on a system.

Why it matters

The TCP/IP stack runs on nearly every Linux server and network device, so flaws in this class can affect a broad surface. The source, however, gives no details on affected versions, exploitation conditions or patch status.

What we know so far

  • The flaw is described as a use-after-free in IPv4/TCP.
  • CVSS score: 9.8.
  • It drew 173 points on Hacker News, meaning the developer community is watching closely.

As details firm up, following distribution security advisories and kernel patches will be essential.