# Ubuntu and RHEL lack fixes for Linux TCP flaw as vendor ratings diverge

_Published Thursday, October 29, 2026 at 1:47 PM EDT · Security, Infrastructure · Latest · Tier 2 — Notable_

![Ubuntu and RHEL lack fixes for Linux TCP flaw as vendor ratings diverge — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcSWXTg8eHlxb0m5-m8xCEly9KQO-0qKV9c7QD7fF51aCb4HUEucmb657vogvKmlA8ra_4kMI6i_w11eYPIVvPSEBnuKnPg9E_HpEw0H1czq883zm_NaUEzarlfXlLd2OKd4b2jbPmMDXvWloR9iNa748-3xhEjD5wNuIznKGTmNwIV3CSeoBkt61zN5o/s1700-nu-rw-lo-l85-e365/linux-dos.png)

Ubuntu and Red Hat Enterprise Linux had not released fixed kernels for CVE-2026-98432 as of October 29, while other distributions had shipped patches for at least some kernels. Red Hat's advisory file raised the flaw's impact to Important with an 8.1 score, while its CVE page still showed Moderate and 5.9.

The bug can make Linux read freed memory during IPv4 connection setup. Anthropic said on October 27 that it built an exploit allowing an unauthenticated remote attacker to run commands as root on servers with a multipath TCP listener, which lets a connection use several network paths.

Amazon's October 29 advisory lists a fix for its kernel6.12 package. Neither vendor advisories nor Anthropic's post reported attacks using the flaw.

## Sources

- [The Hacker News](https://thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html)

---
Canonical: https://techandbusiness.org/newswire/dRv8c-z9mNAPrDSSlPDmzf
Published: 2026-10-29T17:47:42.271Z
Story chronology: 2026-10-29T15:57:00.000Z
Retrieved: 2026-10-29T20:38:49.206Z
Publisher: Tech & Business (techandbusiness.org)