Critcal bug in TCP/IP-stack, remotely exploitable (CVE-2026-98432)

Offen
  • Stimmt etwas nicht?
#7,738 2 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen

Maintainer antworten meist innerhalb von 1 Tag

Dieses Issue hat noch niemand übernommen.

Bewertung

Schwierigkeit
4/5
Geschätzter Aufwand
3-5 Tage
Anfängerfreundlichkeit
30/100
Issue-Typ
Bug
Klarheit
Muss geklärt werden
Aktivitätsstatus
Veraltet
Tech-Stack
c, linux
Bereich
operating-systems, security

Rechercherichtung

Start by comparing the reported Raspberry Pi kernel version, 6.18.50+rpt-rpi-v8, with the upstream kernel versions listed as fixed and the linked CVE details. The issue names no source files or tests, so first determine whether this Raspberry Pi kernel is affected and whether the upstream fix is present. Done means confirming the vulnerability applies to this build and identifying a reproducible failure or a missing fix.

Vom Indexierungsmodell aus dem Issue-Text verfasst.

Beschreibung

Describe the bug

A critical vulnerability in the Linux kernel’s networking code affects nearly all Linux distributions, including Debian, Red Hat, Suse and Ubuntu. The problem lies in the TCP/IP stack, where attackers can exploit it over a network to inject and run their own code (remote code execution, CVSS 9.8, the highest severity level). The kernel team has already released a fix, however, and the first distributors have published updates.

Anthropic’s Claude recently uncovered this critical security vulnerability while systematically testing major projects. It had gone undetected in the Linux kernel code used by millions of systems for almost exactly 11 years. The issue is a race condition that can let an attacker make the victim’s Linux kernel use memory on one CPU that another CPU had just freed. This leads to unexpected memory access, which the attacker can coordinate to run injected code. Claude demonstrated this with a working exploit, and Anthropic reported the bug to the Linux kernel team.

The faulty code was committed on Oct. 2, 2015, in kernel version 4.4, and was reviewed and approved by several experts. Only a systematic search by AI brought it to light. On Oct. 15, 11 years after the commit, Greg Kroah-Hartman confirmed that the bug, CVE-2026-98432, had been fixed in kernel versions 6.12.113, 6.18.56, 7.2.10 and 7.3-rc7.

The vulnerability affects all IPv4 implementations since Linux kernel version 4.4; IPv6 is not affected. Linux distributors are currently working hard to provide updated kernels for affected products that are still supported. Advisories from Debian, Red Hat, Suse and Ubuntu provide the latest information. Administrators should install patched kernels as soon as they become available.

Little is known so far about the specific threat posed by this vulnerability. The only known exploit so far comes from Anthropic and is not publicly available. It targets so-called Multipath TCP (MPTCP) connections. MPTCP is a TCP option that a server service must explicitly request; only Go applications enable it by default. However, it is unclear whether an MPTCP service must actually be running on the target system for an attack to work. So far, we know nothing about specific attacks or what they would look like.

Steps to reproduce the behaviour

description tells - so far there's no known exploit, but I'd wager it'll only be a matter of time.

CVE is linked above for more details

Device (s)

Raspberry Pi 4 Mod. B

System

Raspberry Pi reference 2023-12-11
Generated using pi-gen, https://github.com/RPi-Distro/pi-gen, 2acf7afcba7d11500313a7b93bb55a2aae20b2d6, stage2

Sep 14 2026 14:49:30
Copyright (c) 2012 Broadcom
version a86983925695a7e63166327d7c002d64040ed31d (clean) (release) (start)

Linux rpi 6.18.50+rpt-rpi-v8 #1 SMP PREEMPT Debian 1:6.18.50-1+rpt1 (2026-09-11) aarch64 GNU/Linux

Logs

No response

Additional context

No response

Vorherrschende Sprache
C
Sterne
13.3k
Forks
5.5k
Ø Merge
3 T. 20 Std.
Gemergte PRs (30 T.)
27

Entwicklungsumgebung

Dieses Projekt bietet weder Dev-Container noch Dockerfile noch Beitragsleitfaden – die Einrichtung liegt bei Ihnen. Beginnen Sie mit der README; die allgemeinen Schritte stehen in unserem Leitfaden für den ersten Beitrag.

Erste Schritte

  1. Lesen Sie das ganze Issue und danach den Beitragsleitfaden des Projekts.
  2. Schreiben Sie ins Issue, dass Sie es übernehmen — das erspart doppelte Arbeit.
  3. Forken Sie das Repository und arbeiten Sie in einem Branch.
  4. Öffnen Sie einen Pull Request, der die Issue-Nummer nennt.

Mehr aus raspberrypi/linux

Alle Issues in raspberrypi/linux

Ähnliche Issues

Weitere Issues zu C

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.