Skip to contentistheinternetok
All incidents

Security flaw·Major

Linux kernel network flaw can give attackers full control of servers

IdentifiedAffects website owners
Linux kernel

What it changes for you

Nothing visible for you; server owners must update.

A flaw in how the Linux kernel handles the start of a network connection can let a remote attacker take over a server, in the worst case with full control. Researchers say they built a working attack against servers that use Multipath TCP. No attacks in the wild are reported yet; Debian has fixed kernels out.

Started Oct 29, 2026Updated Nov 2, 2026

Post on X

What should I do?

You
Nothing to do. Keep your devices updated.
If you run a website or an app
Install your distribution's latest kernel update and reboot (Debian: 6.1.190-1 or 6.12.113-1 or later). Until then, do not expose Multipath TCP listeners you do not need.

What is affected

CVE-2026-98432Severity score 9.8 out of 10

Timeline

  1. Identified · Oct 29, 2026

    A use-after-free in the Linux IPv4 TCP handshake code is documented as CVE-2026-98432, rated 9.8. Debian lists fixed kernel packages. On October 30, BleepingComputer reports that researchers built an exploit giving remote root on servers with Multipath TCP listeners.

    Debian Security Tracker

Sources