A critical vulnerability (CVE-2026-98432) with a CVSS score of 9.8 affects the Linux kernel’s IPv4 TCP stack. A race condition during SYN packet processing and socket migration can trigger a use-after-free condition in inet_sock_destruct() and tcp_v4_reqsk_destructor(), potentially enabling remote code execution. Administrators should apply the latest kernel patches utilizing kfree_rcu().
READ THE ORIGINAL ARTICLE AT FORTIGUARD.FORTINET.COM →