Search: CVE-2026-98432

CVE-2026-98432 is a critical use-after-free vulnerability in the Linux kernel's IPv4 TCP request socket handling. It arises because the inet_opt and ireq_opt options are freed improperly without waiting for an RCU grace period, leading to potential memory corruption during concurrent SYNACK processing. The issue affects Linux kernel version 4.4 and has been fixed in later commits. IPv6 is not affected by the primary issue but has a related migration issue to be addressed separately.

This report summarizes multiple significant cyber threats and incidents disclosed in early November 2026. Major breaches include a $6.3 billion cryptocurrency theft from Binance via compromised internal infrastructure, a malicious JavaScript attack on Polymarket's platform, and data breaches affecting Japan Airlines and the Florida Department of Education. The report also highlights the use of AI by threat actors such as the GOLD OGRE ransomware group and North Korean cyber operators to enhance attack capabilities. Several critical vulnerabilities are noted, including CVE-2026-111497 (HTTP2Shell) affecting Brotli decompression, a critical Linux kernel TCP networking flaw (CVE-2026-98432), and a Drupal Commerce Core access control vulnerability (CVE-2026-118539). Cisco patched a high-severity SSL VPN crash vulnerability (CVE-2026-76418) that was exploited in the wild. Additional threat intelligence includes malware campaigns and advanced persistent threat activity targeting various sectors globally.