// AWSHIGH
CVE-2026-98432, a critical Linux kernel use-after-free vulnerability in IPv4 TCP handling, affects Amazon Linux and other Linux distributions used in AWS EC2. The flaw allows remote attackers to crash systems or achieve remote code execution when specific conditions (such as an MPTCP listener) are present. Researchers demonstrated reliable remote root execution in lab conditions. AWS customers should apply kernel patches and reboot affected instances.
- CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validati(opens in a new tab)
- Critical Linux Kernel Vulnerability Lets Remote Attackers Crash (opens in a new tab)
- Red Hat Security Advisory: kernel security, bug fix, and enhance(opens in a new tab)
- CVE-2026-98432: Linux Kernel Root RCE Risk Explained(opens in a new tab)
- Linux Kernel TCP Flaw Rated 9.8 Gets a Remote-Root Exploit From (opens in a new tab)
- Ubuntu Releases Security Fixes for Critical Linux Kernel Vulnera(opens in a new tab)
// Get alerts for AWS