2.1M Linux servers exposed to CVSS 9.8 kernel flaw CVE-2026-98432, Ubuntu patch pending
nicolascraske · x · 2026-11-05
Marcus Hutchins warns attackers are scanning the entire internet for Linux servers exposed to CVE-2026-98432, a critical kernel bug, with about 2.1 million vulnerable servers found.
- The flaw is a race condition in the code handling incoming IPv4 TCP connections, scored 9.8 Critical on CVSS
- It lets a remote attacker run commands as root during the TCP handshake
- Ubuntu still has no patch: 26.04, 24.04, 22.04 LTS and earlier releases are all listed as Vulnerable with fixes in progress (only 14.04 is unaffected)
More from Safety
- No external evaluation, no transparency? That's product development, not safety auditing — davidmanheim · 2026-11-05
- OpenAI reassigned a quarter of production engineers to fix lax security, Reuters reports — ChrisGPT · 2026-11-05
- Texas Blue Wave Threatens AI Data Center Boom: Permits Already Halted, Governor-Elect Wants Moratorium — MIT Tech Review AI · 2026-11-05
- UW study: leading AI models rate Chinese and Nigerian accents lower in speech scoring — lazowska · 2026-11-05
- Hugging Face's policy chief on open source AI costs, risks, and the China race — TechCrunch AI · 2026-11-05
- CoT controllability far higher than evals suggest: self-instructions beat prompts, can evade monitors — kastnerkyle · 2026-11-05