Posted by Rui Sousa on Oct 31 Hello, An additional hardening option for CVE-2026-98432 (the IPv4 TCP inet_opt use-after-free), for systems that cannot take a fixed kernel yet. The interim mitigations…
Serial Number: AV26-1108 Date: October 30, 2026 As of October 15, 2026, Linux is affected by a vulnerability in the following product: Linux Prior to 5.10.272 Prior 5.15.223 Prior to 6.1.190 Prior to…
Posted by John Haxby on Oct 30 MPTCP can be disabled system-wide on Linux with `sysctl -w net.mptcp.enabled=0` This will, of course, upset programs that require mptcp although[1] suggests that while…
Posted by Alan Coopersmith on Oct 29 Forwarded Message Subject: [security] Protecting against CVE-2026-98432 Date: Thu, 29 Oct 2026 16:34:28 -0700 (PDT) From: Neal Patel To: golang-announce Hi…
A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The kernel's own CVE team rates it 9.8 out of 10 on…