it-systeme
christoph ender it operations · networking · software development
about
Hi there! These pages are intended to share notes and
experiences from my work as an IT freelancer – yes, you
can hire me – working in OPs, networking and development.
contact
latest blog entry: “CVE-2026-98432 mitigations”
For several days now, Linux has been affected by CVE-2026-98432. This appears to be a race condition which might occur when new TCP connections are established, and in the end might lead to a full root-level compromise of the affected system. The problem appears to have been known since October 15th; however, as of today – October 30th – the corresponding overview on hacker news still reports no patches available for Ubuntu and Red Hat systems. Ubuntu has assigned a 9.8 critical rating. Since I'm also administering a few Ubuntu systems which were not to be shut down in the meantime, I applied a few mitigations to bridge the gap until patches are available.