[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fd3K74mVDeSgId6ljvpXKobXmSKtkMkgcTf-5Le6RWu4":3},{"article":4,"iocs":36,"watch_terms":41,"solutions":42,"lesson":132},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"3c203f24-5f15-4851-85b5-06262a85e124","Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing","red-hat-patches-9-8-rated-linux-tcp-rce-flaw-while-ubuntu-releases-fixes-for-tes-b84cad","Fixed kernels for a use-after-free vulnerability in the Linux kernel's IPv4 TCP code are now available for Red Hat Enterprise Linux 8, 9, and 10, while Ubuntu's fixes for its three newest long-term-support releases remain in its opt-in testing channel with no date for a regular update. The flaw, tracked as CVE-2026-98432, can be reached by a remote, unauthenticated attacker and can","Red Hat has released patched kernels for a critical use-after-free vulnerability in the Linux kernel's IPv4 TCP code, affecting RHEL 8, 9, and 10. The flaw, CVE-2026-98432, is rated 9.8 and allows remote, unauthenticated attackers to exploit it. Ubuntu has also developed fixes for its LTS releases, but they are currently only available in the opt-in testing channel.","Red Hat fixes Linux TCP RCE flaw; Ubuntu fixes remain in testing.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F11\u002Fred-hat-patches-98-rated-linux-tcp-rce.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEjdf8UfDHsjH9VaJGtYT5WgjtJ1G5YRMkjPWNeKn-hw05sM9ny0kW9L2eIc3UCiIQ7qmc_TmfrenS1WH8KiRBjln2hQS0X7DUlykxdHrzDgg4uoiHpiOf3fVTOnUuOt4618z3PN7hw1AfUch_y0Tot3ubTga5LEfyWnATkzegfQBSWxMbzNzJaGY18QqC8\u002Fs1600\u002Flinux-rce.jpg","2026-11-03T11:23:53+00:00","2026-11-03T13:00:31.08237+00:00",9,[17,20,22,25],{"name":18,"type":19},"Red Hat","vendor",{"name":21,"type":19},"Ubuntu",{"name":23,"type":24},"Red Hat Enterprise Linux","product",{"name":26,"type":27},"Linux kernel","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":28,"icon":30,"name":31,"slug":32},null,"Vulnerabilities","vulnerabilities",[34],{"category":35},{"id":28,"icon":30,"name":31,"slug":32},[37],{"type":38,"value":39,"context":40},"cve","CVE-2026-98432","Use-after-free vulnerability in Linux kernel's IPv4 TCP code",[18,21,23],{"controls":43,"vendors":131},[44,73,102],{"slug":45,"name":46,"problem":47,"products":48},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[49,57,65],{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":53,"product_name":54,"url":55,"description":56},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":74,"name":75,"problem":76,"products":77},"patch-management","Automated patch management","Known holes get closed in days, not months.",[78,86,94],{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":103,"name":104,"problem":105,"products":106},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[107,115,123],{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",[],{"slug":133,"title":134,"body":135,"framework_refs":136,"framework_notes":144},"critical-linux-tcp-rce-flaw-demands-urgent-kernel-patching","Critical Linux TCP RCE Flaw Demands Urgent Kernel Patching","A critical use-after-free vulnerability (CVE-2026-98432) in the Linux kernel's IPv4 TCP stack has been rated 9.8\u002F10, allowing remote, unauthenticated attackers to potentially execute arbitrary code on affected systems. Red Hat has released patched kernels for RHEL 8, 9, and 10, while Ubuntu's fixes remain in an opt-in testing channel rather than being pushed to stable releases immediately. This gap between patch availability and deployment represents a dangerous window of exposure, especially for internet-facing Linux servers. The severity of an unauthenticated RCE at the kernel level means that any delay in patching could result in full system compromise with no user interaction required.",[137,138,139,140,141,142,143],"CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components","NIS2 Article 21(2)(b)","PCI DSS Requirement 6","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control",{"NIS2 Article 21(2)(b)":145,"PCI DSS Requirement 6":146,"NIST SP 800-53 SI-2: Flaw Remediation":147,"OWASP A06:2021 Vulnerable and Outdated Components":148,"CIS Control 7: Continuous Vulnerability Management":149,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":150,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":151},"NIS2 mandates that essential and important entities handle incidents and apply security patches as part of their baseline cybersecurity hygiene; a CVSS 9.8 unauthenticated RCE in a core network protocol falls squarely within the scope of vulnerabilities this article requires to be addressed promptly.","Requirement 6 mandates that organizations protect systems and software from known vulnerabilities through timely patching, making delayed remediation of a critical kernel flaw a direct compliance violation for any cardholder data environment running affected Linux systems.","SI-2 requires organizations to identify, report, and correct information system flaws on defined timelines; enforcing this control would mandate that a 9.8-rated kernel RCE be remediated within hours, not left pending stable channel releases.","The Linux kernel is a foundational component; OWASP A06 directly addresses the risk of running known-vulnerable components, underscoring the need to track kernel versions and patch them as rigorously as application dependencies.","A continuous vulnerability management program would have flagged CVE-2026-98432 as a CVSS 9.8 priority immediately upon disclosure, triggering an emergency patching workflow before attackers could exploit the window.","This control requires timely identification and remediation of technical vulnerabilities; had it been fully implemented, the organization would have had a defined process to apply the Red Hat patch immediately rather than waiting on Ubuntu's stable channel.","Because this flaw allows unauthenticated remote exploitation, network-layer access controls enforced under this CSF practice—such as restricting which hosts can initiate TCP connections to critical servers—serve as a critical compensating control while patches are being deployed."]