Vulnerabilities & Exploits

Fortinet flags Linux kernel remote-code-execution flaw

Fortinet's PSIRT listing identifies CVE-2026-98432 as a Linux kernel remote code execution (RCE) flaw.

Remote code execution means an attacker could run code on a vulnerable host, but the supplied material does not describe how the flaw is triggered or identify affected versions. It also provides no exploitation evidence or remediation detail, so the label cannot establish which installations are exposed.

For Linux fleet teams, the open question is whether their distribution-specific kernel builds fall within the affected range. If they do, the flaw could put host-level code execution in scope; the supplied material does not establish which fleets inherit that risk or what fix applies.

1 source · 15h ago

CVE-2026-98432

NVD KEV

CVSS 9.8 CRITICAL: in the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU… EPSS 0.5% (40th percentile). Microsoft patch: Release Notes.

Timeline

Sources

Part of the PlainSec briefing for 2026-11-02

Every edition of this story: Fortinet flags Linux kernel remote-code-execution flaw

More from today