Published on: 30 October 2026
A memory vulnerability exists in the Linux kernel's IPv4 TCP connection handling. An unauthenticated network attacker could trigger it to cause a kernel crash, memory corruption, or potentially remote code execution as root.
Reports indicate that proof-of-concept (PoC) exploit code is available for the vulnerability. System administrators are advised to take immediate action to patch affected systems once the patches are released to mitigate the elevated risk of cyber attacks.
For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.
Successful exploitation of the vulnerability could lead to remote code execution, denial of service or information disclosure on an affected system.
The vulnerability is yet to be fixed in some of the affected Linux distributions including Debian, Red Hat, SUSE and Ubuntu. The following is only a sample list of Linux distributions that are affected. The list is not exhaustive and it is strongly recommended to consult the product vendors if the used Linux systems are affected. System administrators should check with their product vendors to confirm if their Linux systems are affected and the availability of patches, and if so, apply the patches or follow the recommendations provided by the product vendors to mitigate the risk.