News

Ubuntu / RHEL 9.8 vulnerabilities have not yet been fixed, and a large number of hosts and servers are still at risk of exposure

1 min read
Source: hkepc.com
[It’s too slow 😱] A serious security vulnerability codenamed CVE-2026-98432 recently broke out in the Linux core, with a CVSS risk score as high as 9.8. The vulnerability has been lurking in the IPv4 TCP network stack of the Linux core for 10 years. An attacker does not need any authentication permissions. He only needs to send a specific request to an open TCP port through the public network to trigger a race condition in the memory and obtain the highest root privileges remotely. Anthropic confirmed that its undisclosed Claude model can independently write and complete remote Root vulnerability exploitation, causing great shock in the global security community. At present, mainstream enterprise-level distributions including Ubuntu and Red Hat Enterprise Linux (RHEL) have not officially released repair cores, and a large number of hosts and servers are still at risk of exposure.