Red Hat Links NVIDIA RHEL 10 Advisory to Linux Kernel Flaw

Red Hat linked an advisory for NVIDIA on Red Hat Enterprise Linux (RHEL) 10 to a critical Linux flaw Nov. 2, while Ubuntu’s main kernels for four releases remained listed as vulnerable.

Anthropic said Claude produced a proof-of-concept exploit for CVE-2026-98432, an IPv4 TCP use-after-free flaw rated 9.8, Critical, on CVSS v3.1. The demonstration needed a Multipath TCP (MPTCP) listener, took 48 minutes to leak a kernel pointer and five more minutes to run a shell command as root.

Red Hat errata posted Nov. 1 addressed the flaw for RHEL 8, 9 and 10, while Red Hat continued to list all three release lines as affected and its related security bulletin as ongoing.

Ubuntu’s Oct. 30 status update marked its main linux packages for versions 22.04, 24.04, 26.04 and 26.10 “Vulnerable, work in progress.” Versions 16.04, 18.04 and 20.04 were listed as vulnerable; Ubuntu assigned the flaw a “High” priority.

The underlying bug is not limited to MPTCP. Go 1.24 and later enables MPTCP by default for Linux listening sockets.