Skip to content

Linux Kernel Use-After-Free Vulnerability - 20261030001

Overview

The WASOC has observed newly published updates from Linux addressing critically rated use-after-free vulnerabilities affecting their products. Successful exploitation could allow an unauthenticated attacker on the network to trigger this vulnerability by sending retransmitted SYN packets to cause a use-after-free condition during SYNACK construction, potentially allowing arbitrary code execution with kernel privileges or causing a kernel crash.

What is vulnerable?

Product(s) Affected Version(s) CVE CVSS Severity
Linux Vendor listed affected versions CVE-2026-98432 9.8 Critical

What has been observed?

The WASOC has not received any reports of exploitation of this vulnerability on Western Australian Government networks at the time of writing.

Recommendation

The WASOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframes (refer Patch Management):