TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 by khrbtxyz on Saturday October 31, 2026 @10:22PM (#50322185)

I do see sockets listening on all interfaces, but those are blocked by the firewall.

  root@OpenWrt2:~# ss -Qlnt4 'src 0.0.0.0'
  State  Local Address:Port Peer Address:Port
  LISTEN       0.0.0.0:443       0.0.0.0:*   
  LISTEN       0.0.0.0:80        0.0.0.0:*   
  LISTEN       0.0.0.0:22        0.0.0.0:*

[ Parent | on HN ]

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 by bpye on Sunday November 01, 2026 @01:48AM (#50323024)

They'd also need to MPTCP right?

[ Parent | on HN ]

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 by khrbtxyz on Sunday November 01, 2026 @08:28AM (#50325493)

Not according to the article, which says the vulnerable path runs "during the TCP handshake, ..."

[ Parent | on HN ]