Linux Kernel Remote Code Execution
What is the Attack? FortiGuard Labs is monitoring CVE-2026-98432, a critical use-after-free vulnerability in the Linux kernel's IPv4 networking subsystem that could allow an unauthenticated remote attacker to execute arbitrary code with kernel-level privileges. The vulnerability stems from improper memory management during TCP connection request processing. Under specific conditions, concurrent operations may access socket-option memory after it has been freed, resulting in a use-after-free condition. An attacker can potentially trigger this flaw by sending specially crafted IPv4 TCP packets containing IP options to a vulnerable system. Exploitation requires precise timing but does not requi
Read at FortiGuard Threat Signal reports
- Vendor
- Fortinet, Linux kernel
- Product
- Linux kernel
- EPSS
- 0.008 (p56)
- Fix
- available
- Exposure class
- Operating system
Why it ranks 32 (Notable)
- Product class: operating system
- Widely deployed vendor product (Fortinet)
- Covered by 7 independent sources
- Fix available
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- FortiGuard Threat Signal reports (fortiguard.fortinet.com)
- CVE-2026-98432 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.