Attackers scan for 2.1M Linux servers exposed to a critical 9.8 kernel flaw, and Ubuntu has no patch yet
The bug is a race condition in IPv4 TCP connection handling.
Attackers are scanning the internet for Linux servers exposed to a critical kernel flaw rated 9.8, according to International Cyber Digest (@IntCyberDigest), citing Marcus Hutchins. They found 2.1 million servers that accept it.
The bug, CVE-2026-98432, is a race condition in the code that handles incoming IPv4 TCP connections, and can let a remote attacker run commands as root during the handshake.
The post says Ubuntu still has no patch. It drew about 640 likes.
