Linux kernel CVE team

Open-source security response group

Appears in 1 story · Last updated Nov 1, 2026

Stories

Linux kernel patches 11-year-old TCP bug after Claude writes a root exploit

New Capabilities

Assigned CVE-2026-98432 and published the fix list

Linux kernels have carried a race condition in their IPv4 TCP code since October 2015, when the faulty commit landed for version 4.4. The kernel's CVE team published it as CVE-2026-98432 on October 15, scoring it 9.8 out of 10.

Updated Nov 1