CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation - Penligent Security Blog – AI-Driven Hacking Tutorials, Exploit PoCs & Cybersecurity Research
- CVE-2026-98432 is a use-after-free in the Linux kernel’s IPv4 TCP handshake path.
- The flaw appears when two processors act on related request and child sockets while both can still reference the same IP options object.
- One path may free that object immediately while another path, protected only as an RCU reader, continues to use it.
Unverified
- CVE-2026-98432 is a use-after-free in the Linux kernel’s IPv4 TCP handshake path.
- The flaw appears when two processors act on related request and child sockets while both can still reference the same IP options object.
- One path may free that object immediately while another path, protected only as an RCU reader, continues to use it.
Sources: Penligent