The php2shell issue from last week was really serious, but it only affected servers running PHP.
This is on another level. 🚨
https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
AtlasLinux's October 2026 TCP Use-After-Free: CVE-2026-98432 — AtlasCVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15. Ubuntu and RHEL haven't shipped a fixed kernel yet.
commit 8dfac8c