CVE-2026-98432
CVSS 9.8 CRITICAL: in the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU… EPSS 0.5% (40th percentile). Microsoft patch: Release Notes.
Vulnerabilities · 14h ago
Fortinet's PSIRT listing identifies CVE-2026-98432 as a Linux kernel remote code execution (RCE) flaw.
Remote code execution means an attacker could run code on a vulnerable host, but the supplied material does not describe how the flaw is triggered or identify affected versions. It also provides no exploitation evidence or remediation detail, so the label cannot establish which installations are exposed.
For Linux fleet teams, the open question is whether their distribution-specific kernel builds fall within the affected range. If they do, the flaw could put host-level code execution in scope; the supplied material does not establish which fleets inherit that risk or what fix applies.
CVSS 9.8 CRITICAL: in the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU… EPSS 0.5% (40th percentile). Microsoft patch: Release Notes.
1 source covering this story
Linux kernel RCE CVE-2026-98432
Advisory: https://fortiguard.fortinet.com/psirt/FG-IR-26-188
Part of the PlainSec briefing for 2026-11-02