Linux TCP use‑after‑free lands with CVE‑2026‑98432

A new kernel flaw, CVE‑2026‑98432, grants remote attackers a high‑severity (CVSS 9.8) path to crash IPv4 TCP connections. The vulnerability stems from a use‑after‑free in the TCP receive path that can be triggered by …

The advisory does not disclose a public exploit, but the write‑up notes that an attacker who can inject traffic into an unprotected TCP session can force the kernel to dereference a freed object, leading to a kernel p…

Databricks sees AWS‑specific slowdowns after TCP SACK patches