CVE-2026-98432 TCP bug RCE CVSS 9.8

AnthonySmithAnthonySmith AdministratorProviderOG
in Security

https://thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html?m=1

All distributions impacted. Ubuntu as always.... We will get there...... eventually

Seems if you run anything web facing built on GO you are much more vulnerable as multi path (not required for exploit) is much more vulnerable.

TierHive - Hourly VPS - NAT Native - /24 per customer - DE, UK, SG, CA x2, USA x5, FR x3, AU, PL, NL, JP, BR, ZA
FREE tokens on sign up, try before you buy. | Static Hosting Free for life: https://tierhive.com/static-hosting/

Comments

  • tulipyuntulipyun

    The uptime for all VPS instances has been successfully reset.

    B)

  • yoursunnyyoursunny OG
    edited October 30

    The flaw is a race condition in the code that sets up new IPv4 TCP connections.

    We disabled IPv4 long ago except on VirMach.
    VirMach hasn’t performed the Pwnscape reboot, so it can’t get worse.

    The last flan is taken. 🍮 affbrr

  • lapualapua

    debian already fixed it!

  • xorxor

    I obviously have another round of updates to do now!

  • AnthonySmithAnthonySmith AdministratorProviderOG

    @tulipyun said:
    The uptime for all VPS instances has been successfully reset.

    B)

    Stick with hosts that use Ubuntu then uptime is increased because apparently getting a patch out is not something they like to do any more

    TierHive - Hourly VPS - NAT Native - /24 per customer - DE, UK, SG, CA x2, USA x5, FR x3, AU, PL, NL, JP, BR, ZA
    FREE tokens on sign up, try before you buy. | Static Hosting Free for life: https://tierhive.com/static-hosting/

  • dbadudedbadude

    binance got hacked! Wow whats is going on?!

    https://www.bbc.com/news/live/cqrmynd3042gt

    14 cents per month netbsd at this aff TierHive

  • AnthonySmithAnthonySmith AdministratorProviderOG

    @dbadude said:
    binance got hacked! Wow whats is going on?!

    https://www.bbc.com/news/live/cqrmynd3042gt

    Damn......

    TierHive - Hourly VPS - NAT Native - /24 per customer - DE, UK, SG, CA x2, USA x5, FR x3, AU, PL, NL, JP, BR, ZA
    FREE tokens on sign up, try before you buy. | Static Hosting Free for life: https://tierhive.com/static-hosting/

  • dbadudedbadude

    @AnthonySmith said:

    @dbadude said:
    binance got hacked! Wow whats is going on?!

    https://www.bbc.com/news/live/cqrmynd3042gt

    Damn......

    WO3 is a cyberwar

    14 cents per month netbsd at this aff TierHive

  • Docker_dudeDocker_dude

    Time to switch to Debian. I think this will not be the only scenario where ubuntu users will have to wait for a sequrity update for days/ weeks.

  • AnthonySmithAnthonySmith AdministratorProviderOG

    @Docker_dude said:
    Time to switch to Debian. I think this will not be the only scenario where ubuntu users will have to wait for a sequrity update for days/ weeks.

    Some of them are now getting towards "Months" plural, it makes no sense to me, ubuntu is debian base anyway they literally have the updates as open code available to them, its almost like selling out and becoming a massive layer of commercial burocracy does not = progress :)

    I remember having a meeting with a senior guy from Canonical a few years back when looking for some assistance with a significant issue impacting a large amount of newly delivered and very expensive hardware.

    He just kept adding more and more people to the meeting in real time until someone actually had enough knowledge to even understand the problem I was presenting (A fairly trivial module race condition in a network based install) then he quoted me $15,000 per day to investigate and patch, open ended and they could start work in around 7 months based on their existing schedule. (After acknowledging it was a problem on their end) and that was for "priority changes"

    Ubuntu/canonical has been eating its own face for years now.

    TierHive - Hourly VPS - NAT Native - /24 per customer - DE, UK, SG, CA x2, USA x5, FR x3, AU, PL, NL, JP, BR, ZA
    FREE tokens on sign up, try before you buy. | Static Hosting Free for life: https://tierhive.com/static-hosting/

  • terrorgenterrorgen OG

    $15000 so you can point fingers when management asks.

    If /you/ are the management then you're f**ked

    DM us for private tracker invite.

  • WSSWSS OG Guru Meditation Error

    @AnthonySmith said: Ubuntu/canonical has been eating its own face for years now.

    This is Canonical.

    LowEndSpirit - VPS Hosting and tech forum

    And I, for one, welcome our new insect overlords.

  • AnthonySmithAnthonySmith AdministratorProviderOG

    @WSS said:

    @AnthonySmith said: Ubuntu/canonical has been eating its own face for years now.

    This is Canonical.

    LowEndSpirit - VPS Hosting and tech forum

    There was more people than that on the teams call :)

    TierHive - Hourly VPS - NAT Native - /24 per customer - DE, UK, SG, CA x2, USA x5, FR x3, AU, PL, NL, JP, BR, ZA
    FREE tokens on sign up, try before you buy. | Static Hosting Free for life: https://tierhive.com/static-hosting/

  • WSSWSS OG Guru Meditation Error

    @AnthonySmith said: There was more people than that on the teams call

    :tired_face:

    I can't tell you how old this picture is. I'm assuming it's only the upper echelon.

    And I, for one, welcome our new insect overlords.

  • AnthonySmithAnthonySmith AdministratorProviderOG

    @WSS said:

    @AnthonySmith said: There was more people than that on the teams call

    :tired_face:

    I can't tell you how old this picture is. I'm assuming it's only the upper echelon.

    LowEndSpirit - VPS Hosting and tech forum

    This guy did shrooms.. 100%!

    TierHive - Hourly VPS - NAT Native - /24 per customer - DE, UK, SG, CA x2, USA x5, FR x3, AU, PL, NL, JP, BR, ZA
    FREE tokens on sign up, try before you buy. | Static Hosting Free for life: https://tierhive.com/static-hosting/

  • dbadudedbadude

    @WSS said:

    @AnthonySmith said: Ubuntu/canonical has been eating its own face for years now.

    This is Canonical.

    LowEndSpirit - VPS Hosting and tech forum

    And me thinking it was an african company. Much on sourcing there.

    14 cents per month netbsd at this aff TierHive

  • dbadudedbadude

    @Docker_dude said:
    Time to switch to Debian. I think this will not be the only scenario where ubuntu users will have to wait for a sequrity update for days/ weeks.

    Did that 4 years ago during the covid times. Got tired of the bloated installs, switching to debian saved lots of ram. Currently switching to fully containerized selfmade OS saving even more ram.

    14 cents per month netbsd at this aff TierHive

Sign In or Register to comment.