🐧 SIGINT // Linux Watch — 2026-10-30
A 9.8 CVSS use-after-free in kernel TCP, reportedly exploited for root on MPTCP servers, and Ubuntu and RHEL don't have fixes yet. Check whether MPTCP is enabled and disable it if you don't need it, until patches land.
🔗 https://thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html
The Hacker NewsLinux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other DistributionsUbuntu and RHEL lack fixes for a Linux TCP use-after-free that Anthropic says it exploited to run commands as root on MPTCP servers.