Linux kernel TCP flaw CVE-2026-98432 lurked for years; firewalls with IP-options filtering mitigate

wightmanr · x · 2026-11-04

Discussion of the Linux kernel TCP exploit CVE-2026-98432: the author notes it's wild such issues can lurk for so long and expects more to surface. In practice, most decent firewalls drop packets with IP options by default — a meaningful mitigations for exposure.

Original post →

More from Safety

Safety channel →