Linux kernel vulnerability allows remote control without password
Linux kernel updates addressing a TCP flaw tracked as CVE-2026-98432 are now rolling out.
Red Hat has released fixed kernels for enterprise versions requiring a reboot, while Ubuntu has made updates available in its testing channel.
The issue affects environments running older kernel branches and requires administrative review.
Red Hat has released official fixes for Red Hat Enterprise Linux versions 8, 9, and 10, which require a system reboot after installation. Corresponding fixes for newer versions of Ubuntu are currently in the testing channel, while older versions do not yet have a solution. Other distributions, such as Debian, SUSE, Oracle Linux, and Amazon Linux, have already released their own updates, with Amazon Linux rating the issue at 8,1.
The problem occurs in conditions of concurrent network data management. On October 27, Anthropic reported that an internal AI research model was able to write functional code that exploits the problem. Only simple programs that cause temporary instability, without executing code, have appeared on the Internet.
So far, no company or relevant group has reported actual attacks on systems by malicious users.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article