News for hackers. Stuff that matters.

A comment on TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8. Parent comment

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 by ranger_danger on Sunday November 01, 2026 @02:32PM (#50328862)
This is misinformed and dangerous advice, MPTCP is not a requirement. You would need to block all TCP packets with any IP options set to fully mitigate this. Thankfully iptables/nft can do it.
[ Parent | on HN ]

There are no comments on this comment yet.