Alert GCSA-26301 - Vulnerabilita' critica nel Kernel Linux (CVE-2026-98432)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-26301 data: 4 novembre 2026 titolo: Vulnerabilita' critica nel Kernel Linux (CVE-2026-98432) ****************************************************************** :: Descrizione del problema Nel kernel Linux e' presente un bug critico, tracciato come CVE-2026-98432 (CVSS score 9.8), che riguarda l'implementazione del protocollo IPv4 TCP. La vulnerabilita' interessa qualsiasi sistema che esponga un servizio in ascolto, un attaccante remoto e non autenticato potrebbe provocare l'esecuzione di codice arbitrario, senza nessuna interazione con l'utente. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Kernel Linux 4.4 :: Impatto Esecuzione remota di codice arbitrario (RCE) :: Soluzioni Versioni del Kernel non interessate dalla 0 fino alla 4.4 esclusa dalla 5.10.272 e successive dalla 5.15.223 e successive dalla 6.1.190 e successive dalla 6.6.159 e successive dalla 6.12.113 e successive dalla 6.18.56 e successive dalla 7.2.10 e successive versione 7.3 Applicare gli aggiornamenti rilasciati dai vari produttori, se gia' disponibili. :: Riferimenti The Hacker News https://thehackernews.com/2026/11/red-hat-patches-98-rated-linux-tcp-rce.html https://thehackernews.com/2026/10/anthropics-unreleased-ai-model-chains.html https://thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html Cyber Security News https://cybersecuritynews.com/linux-kernel-rce-flaw-ubuntu-fixes/ https://cybersecuritynews.com/linux-kernel-flaw-root-commands/ Bleeping Computer https://www.bleepingcomputer.com/news/security/critical-linux-kernel-flaw-allows-remote-root-attacks-on-mptcp-servers/ Red Hat Security Advisory https://access.redhat.com/security/vulnerabilities/RHSB-2026-016 https://access.redhat.com/security/cve/cve-2026-98432 https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2026:93412 https://access.redhat.com/errata/RHSA-2026:93413 https://access.redhat.com/errata/RHSA-2026:93414 https://access.redhat.com/errata/RHSA-2026:94109 https://access.redhat.com/errata/RHSA-2026:94303 https://access.redhat.com/errata/RHSA-2026:94438 https://access.redhat.com/errata/RHSA-2026:94623 Ubuntu https://ubuntu.com/blog/fixes-available-in-proposed-pocket-for-cve-2026-98432 https://ubuntu.com/security/CVE-2026-98432 Debian https://security-tracker.debian.org/tracker/CVE-2026-98432 Amazon Linux Security Center https://explore.alas.aws.amazon.com/CVE-2026-98432.html Fortinet Fortiguard Labs https://fortiguard.fortinet.com/psirt/FG-IR-26-188 Anthropic - Discovering vulnerabilities with Claude https://www.anthropic.com/research/discovering-vulnerabilities-with-claude MikroTik RouterOS https://mikrotik.com/supportsec/cve-2026-98432/ WatchGuard advisories https://psirt.watchguard.com/WGSA-2026-0033 Tenable CVE-2026-98432 https://www.tenable.com/cve/CVE-2026-98432 CVE List https://www.cve.org/CVERecord?id=CVE-2026-98432 https://nvd.nist.gov/vuln/detail/cve-2026-98432 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCausEVgAKCRDBnEyTZRJg QhwpAKDNwYVyfd0AID8311fJntrtnXOK8ACgnREwNWAPpFodgA7CzS/UfidQIXE= =f9z/ -----END PGP SIGNATURE-----