Critcal bug in TCP/IP-stack, remotely exploitable (CVE-2026-98432)

Đang mở
  • Có gì không ổn?
#7,738 2 bình luận 0 reaction 0 người được giao Xem trên GitHub

Maintainer thường phản hồi trong vòng 1 ngày

Chưa có ai nhận issue này.

Đánh giá

Độ khó
4/5
Thời gian dự kiến
3-5 ngày
Mức phù hợp với người mới
30/100
Loại issue
Lỗi
Độ rõ ràng
Cần làm rõ
Mức độ hoạt động
Đình trệ
Công nghệ
c, linux
Lĩnh vực
operating-systems, security

Hướng nghiên cứu

Start by comparing the reported Raspberry Pi kernel version, 6.18.50+rpt-rpi-v8, with the upstream kernel versions listed as fixed and the linked CVE details. The issue names no source files or tests, so first determine whether this Raspberry Pi kernel is affected and whether the upstream fix is present. Done means confirming the vulnerability applies to this build and identifying a reproducible failure or a missing fix.

Do mô hình lập chỉ mục viết ra từ nội dung của issue.

Mô tả

Describe the bug

A critical vulnerability in the Linux kernel’s networking code affects nearly all Linux distributions, including Debian, Red Hat, Suse and Ubuntu. The problem lies in the TCP/IP stack, where attackers can exploit it over a network to inject and run their own code (remote code execution, CVSS 9.8, the highest severity level). The kernel team has already released a fix, however, and the first distributors have published updates.

Anthropic’s Claude recently uncovered this critical security vulnerability while systematically testing major projects. It had gone undetected in the Linux kernel code used by millions of systems for almost exactly 11 years. The issue is a race condition that can let an attacker make the victim’s Linux kernel use memory on one CPU that another CPU had just freed. This leads to unexpected memory access, which the attacker can coordinate to run injected code. Claude demonstrated this with a working exploit, and Anthropic reported the bug to the Linux kernel team.

The faulty code was committed on Oct. 2, 2015, in kernel version 4.4, and was reviewed and approved by several experts. Only a systematic search by AI brought it to light. On Oct. 15, 11 years after the commit, Greg Kroah-Hartman confirmed that the bug, CVE-2026-98432, had been fixed in kernel versions 6.12.113, 6.18.56, 7.2.10 and 7.3-rc7.

The vulnerability affects all IPv4 implementations since Linux kernel version 4.4; IPv6 is not affected. Linux distributors are currently working hard to provide updated kernels for affected products that are still supported. Advisories from Debian, Red Hat, Suse and Ubuntu provide the latest information. Administrators should install patched kernels as soon as they become available.

Little is known so far about the specific threat posed by this vulnerability. The only known exploit so far comes from Anthropic and is not publicly available. It targets so-called Multipath TCP (MPTCP) connections. MPTCP is a TCP option that a server service must explicitly request; only Go applications enable it by default. However, it is unclear whether an MPTCP service must actually be running on the target system for an attack to work. So far, we know nothing about specific attacks or what they would look like.

Steps to reproduce the behaviour

description tells - so far there's no known exploit, but I'd wager it'll only be a matter of time.

CVE is linked above for more details

Device (s)

Raspberry Pi 4 Mod. B

System

Raspberry Pi reference 2023-12-11
Generated using pi-gen, https://github.com/RPi-Distro/pi-gen, 2acf7afcba7d11500313a7b93bb55a2aae20b2d6, stage2

Sep 14 2026 14:49:30
Copyright (c) 2012 Broadcom
version a86983925695a7e63166327d7c002d64040ed31d (clean) (release) (start)

Linux rpi 6.18.50+rpt-rpi-v8 #1 SMP PREEMPT Debian 1:6.18.50-1+rpt1 (2026-09-11) aarch64 GNU/Linux

Logs

No response

Additional context

No response

Ngôn ngữ chính
C
Star
13.3k
Fork
5.5k
Merge trung bình
3 ngày 20 giờ
Pull request đã merge (30 ngày)
27

Chuẩn bị môi trường

Dự án này không cung cấp dev container, Dockerfile hay hướng dẫn đóng góp, nên bạn cần tự thiết lập môi trường: hãy bắt đầu từ README và xem hướng dẫn đóng góp lần đầu của chúng tôi để biết các bước chung.

Bắt đầu từ đâu

  1. Đọc hết issue, rồi đọc hướng dẫn đóng góp của dự án.
  2. Bình luận trên issue rằng bạn sẽ nhận — tránh hai người làm cùng một việc.
  3. Fork repository và làm thay đổi trên một nhánh.
  4. Mở pull request có tham chiếu số hiệu của issue.

Issue khác của raspberrypi/linux

Tất cả issue của raspberrypi/linux

Issue tương tự

Thêm issue về C

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.