News for hackers. Stuff that matters.

A comment on TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8.

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 by rurban on Saturday October 31, 2026 @04:56PM (#50320134)
In an earlier report, it said only affected is kernel 4.4, not all since. This quite dramatic now.

I see. https://nvd.nist.gov/vuln/detail/cve-2026-98432 affected versions format is the culprit. Entirely unusable. We do have versions, branch names and tags for a reason.

[ Parent | on HN ]
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 by pizza234 on Saturday October 31, 2026 @05:02PM (#50320203)
Wrong. Every kernel from 4.4 onward is affected until the fixed releases (5.10.272, 5.15.223, 6.1.190 and so on).
[ Parent | on HN ]
Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 by Mawr on Saturday October 31, 2026 @07:36PM (#50321312)
Right. The "Affected Products" section on https://nvd.nist.gov is absolutely useless and highly misleading. I don't understand how this can be the case for something so security critical.
[ Parent | on HN ]