it-systeme
christoph ender it operations · networking · software development
about
Hi there! These pages are intended to share notes and
experiences from my work as an IT freelancer – yes, you
can hire me – working in OPs, networking and development.
contact
latest blog entry: “CVE-2026-98432 mitigations”
For several days now, Linux has been affected by CVE-2026-98432. This appears to be a race condition which might occur when new TCP connections are established, and in the end might lead to a full root-level compromise of the affected system. The problem appears to have been known since October 15th; however, as of today – October 30th – the corresponding overview on hacker news still reports no patches available for Ubuntu and Red Hat systems. While Red Hat seems to rate the issue at up to 8.1, Ubuntu has assigned a 9.8 critical rating. Since I'm also administering a few Ubuntu systems which were not to be shut down in the meantime, I applied a few mitigations to bridge the gap until patches are available.