Research

Mutipath TCP: Use and Detection

Last week, an often-ignored&#;x26;#;xc2;&#;x26;#;xa0;TCP option, introduced in 2020, made the news due to a new vulnerability in Linux&#;x26;#;39;s implementation (RFC&#;x26;#;xc2;&#;x26;#;xa0;8684, &#;x26;#;xc2;&#;x26;#;xa0;CVE-2026-98432)

Read at SANS Internet Storm Center

EPSS

0.005 (p40)

• SANS Internet Storm Center (isc.sans.edu)
• CVE-2026-98432 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 31
   Research Check Point Research 2h ago

   2nd November – Threat Intelligence Report

   CVE-2026-111497CVE-2026-98432CVE-2026-118539+1 more
2. 69
   Advisory Fortinet PSIRT 10h ago

   Linux kernel RCE CVE-2026-98432

   CVSS 9.8 Fix available CVE-2026-98432 Fortinet Linux kernel
3. 37
   AWS bulletin AWS 2d ago

   CVE-2026-98432 - Linux kernel IPv4 TCP use-after-free Issue

   CVE-2026-98432 Amazon Web Services Linux kernel
4. 28
   CCCS advisory CCCS 2d ago

   Linux security advisory (AV26-1108)

   CVE-2026-98432
5. 28
   CVE NVD 18d ago

   In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock()…

   Fix available CVE-2026-98432 Linux kernel