VulnHub

Real-time Cybersecurity News

High

Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing

The Hacker News
LinuxCVEExploitVulnerabilityUpdateRCERed HatCanonical

Overview

Red Hat has released patches for a serious vulnerability in the Linux kernel's TCP code, identified as CVE-2026-98432. This flaw allows remote, unauthenticated attackers to exploit a use-after-free condition in the IPv4 TCP stack, potentially leading to remote code execution. The patched kernels are available for Red Hat Enterprise Linux versions 8, 9, and 10. In contrast, Ubuntu has not yet released a stable update for its long-term support versions, which are currently in an opt-in testing phase. This delay in Ubuntu's response raises concerns about the security of users relying on its systems until a formal fix is implemented.

Key Takeaways

  • Affected Systems: Red Hat Enterprise Linux 8, 9, and 10; Ubuntu long-term support releases (specific versions not detailed).
  • Action Required: Patches are available for Red Hat Enterprise Linux versions 8, 9, and 10.
  • Timeline: Newly disclosed

Original Article Summary

Fixed kernels for a use-after-free vulnerability in the Linux kernel's IPv4 TCP code are now available for Red Hat Enterprise Linux 8, 9, and 10, while Ubuntu's fixes for its three newest long-term-support releases remain in its opt-in testing channel with no date for a regular update. The flaw, tracked as CVE-2026-98432, can be reached by a remote, unauthenticated attacker and can

Impact

Red Hat Enterprise Linux 8, 9, and 10; Ubuntu long-term support releases (specific versions not detailed).

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Newly disclosed

Remediation

Patches are available for Red Hat Enterprise Linux versions 8, 9, and 10. Ubuntu users should monitor the opt-in testing channel for updates.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Linux, CVE, Exploit, and 5 more.

Read Original Article

Related Coverage

Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft

The Hacker News

Binance recently reported a staggering theft of $6.43 billion from its platform, attributing the breach to a complex scheme involving fake job interviews and the misuse of an altered Homebrew installation. Attackers targeted two of Binance's engineers through social engineering tactics disguised as recruitment efforts. This incident is significant as it illustrates the lengths to which cybercriminals will go to infiltrate a major cryptocurrency exchange. The theft not only impacts Binance but also raises concerns for users and investors in the cryptocurrency space about the security of their assets. As the largest exchange globally, the breach may have wider implications for trust and security in the entire crypto market.

Nov 3, 2026

Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

The Hacker News

Barracuda has revealed two serious vulnerabilities in its products that could allow attackers to bypass authorization and gain root access to affected devices. The first vulnerability is a pre-authentication authorization bypass, while the second is a command injection flaw. Together, these vulnerabilities have been assigned the CVE identifier CVE-2026-116606 and carry a high severity score of 9.3. This is particularly concerning because if exploited, attackers could gain full control over the device, potentially leading to significant data breaches or service disruptions. Users of Barracuda's products should take these findings seriously and ensure their systems are updated promptly to mitigate any risks associated with these vulnerabilities.

Nov 3, 2026

Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges

The Hacker News

Google has issued a warning about a new type of cyber attack known as LLMjacking, where attackers exploit enterprises' access to Large Language Models (LLMs) for fraudulent gain. These attackers typically acquire an API key through methods like phishing, source code leaks, or misconfigured environments. As a result, companies can face significant financial losses, with some reporting up to $1 million in additional cloud charges due to unauthorized use of AI services. This situation poses a serious risk to businesses relying on LLMs, highlighting the need for better security practices to protect sensitive access credentials. Companies must be vigilant and ensure their systems are properly configured to prevent such hijacking incidents.

Nov 3, 2026

cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes

The Hacker News

On November 2, an attacker compromised the update system of cPGuard, a security tool for Linux servers, and deployed a malicious script to its users. This script created a backdoor on the affected servers, allowing the attacker to collect sensitive information, including password hashes. The company behind cPGuard, OPSSHIELD, confirmed that some of this stolen data has already been retrieved by the attacker. The breach specifically affects users running cPGuard version 5.88.25 and later. This incident raises concerns about the security of update channels and the potential for attackers to exploit trusted software to infiltrate systems.

Nov 3, 2026

Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets

The Hacker News

BTCPay Server, a self-hosted cryptocurrency payment processor, has issued a warning after discovering that hackers have been stealing Bitcoin and Litecoin from hot wallets on servers running outdated software. The attacks specifically targeted versions of BTCPay Server up to and including 2.4.1, which was released on July 23, 2026. Users are strongly encouraged to update to the latest version to protect their assets. This incident highlights the ongoing risks associated with using older software versions, particularly in the cryptocurrency space where funds can be easily stolen. Users need to stay vigilant and ensure their systems are up-to-date to minimize the risk of similar attacks in the future.

Nov 3, 2026

Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw

The Hacker News

Synology is warning users to update their DiskStation Manager (DSM) software after discovering that attackers are exploiting a vulnerability that was patched in December 2024. The company noted that these ransomware attacks specifically target older versions of the DSM software, allowing threat actors to encrypt files and demand ransom from users. This situation affects anyone using Synology NAS devices that have not yet updated their software, putting sensitive data at risk. Synology's call to action emphasizes the importance of keeping software up to date to prevent falling victim to these types of attacks. Users should take immediate steps to secure their devices to avoid potential data loss and financial extortion.

Nov 3, 2026