TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
240 comments
- Points477
- Comments218
240 comments
Story details from Hacker News ↗ · linked article on atlasum.net.
TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 was first seen on Hacker News · Front page on Oct 31, 2026. Since then it has appeared in 62 checks on 2 different days. Its best position was #2 of 30, reached on Nov 1, 00:52 UTC. It is #2 right now, holding steady at #2 over the last 6 checks.
Position on Hacker News · Front page at every check (lower is better).
Best rank per day (UTC).
points as reported by Hacker News.
A few top-level comments from Hacker News, shortened. Read the full thread on Hacker News.
> TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 I know it's customary for HN to edit titles to remove extraneous information, but removing "Linux" here really takes away something useful and relevant. This is a Linux vulnerability. If you're running *BSD or Mac or Windows, not affected.
Some notes I've got about this: - MPTCP is not a requirement, it is a generic use-after-free. - Exploitability over the internet is unlikely, most ISP routers drop packets with IP options fields. - At least according to Red Hat, dropping packets with IP options yourself helps, but is not a full mitigation. -…
How are Ubuntu and RHEL not fixed? Few operating systems market themselves more as suitable for servers. What are they doing over there?
Yes. As of Nov 1, 11:07 UTC it is #2, holding steady at #2 over the last 6 checks.
#2 on Hacker News · Front page, on Nov 1, 00:52 UTC. Trendoday checks this list every 15 minutes.
It was first seen on Oct 31, 2026 and has been on the list on 2 days (62 checks) since.
477 points and 218 comments; submitted by oger on Oct 31, 2026.