# Linux kernel TCP RCE vulnerability (CVE-2026-98432)

**URL:** <https://discourse.mailinabox.email/t/linux-kernel-tcp-rce-vulnerability-cve-2026-98432/17122>\
**Category:** Improvements\
**Created:** [November 2, 2026, 6:34pm UTC](https://discourse.mailinabox.email/t/linux-kernel-tcp-rce-vulnerability-cve-2026-98432/17122 "2026-11-02T18:34:58Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![pgnickb](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/p/7feea3/32.png) [@pgnickb](https://discourse.mailinabox.email/u/pgnickb)\
**Post date:** [November 2, 2026, 6:34pm UTC](https://discourse.mailinabox.email/t/linux-kernel-tcp-rce-vulnerability-cve-2026-98432/17122/1 "2026-11-02T18:34:59Z")

</div>

Hi. I don’t see this being discussed anywhere. Meanwhile Ubuntu is being extremely slow with this fix. It makes me question the sanity of Ubuntu even more than usually.

What do the project maintainers think on the topic? Debian has shipped the fix on Oct 16.

---

<div class="post-metadata">

**Author:** ![david.blythe](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/david.blythe/32/3143_2.png) [@david.blythe](https://discourse.mailinabox.email/u/david.blythe)\
**Post date:** [November 2, 2026, 9:32pm UTC](https://discourse.mailinabox.email/t/linux-kernel-tcp-rce-vulnerability-cve-2026-98432/17122/2 "2026-11-02T21:32:02Z")

</div>

I don’t believe it is used in MiaB, or the underlying protocols. But, if you feel the need to, login to your box, and disable it:

`sudo systctl -w net.mptcp.enabled=0`

To check on it’s status:

`sysctl net.mptcp.enabled`

---

<div class="post-metadata">

**Author:** ![david.blythe](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/david.blythe/32/3143_2.png) [@david.blythe](https://discourse.mailinabox.email/u/david.blythe)\
**Post date:** [November 2, 2026, 9:34pm UTC](https://discourse.mailinabox.email/t/linux-kernel-tcp-rce-vulnerability-cve-2026-98432/17122/3 "2026-11-02T21:34:45Z")

</div>

To view the status of Ubuntu’s hard work on the patch:

[https://ubuntu.com/security/CVE-2026-98432](https://ubuntu.com/security/CVE-2026-98432)

---

<div class="post-metadata">

**Author:** ![david.blythe](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/david.blythe/32/3143_2.png) [@david.blythe](https://discourse.mailinabox.email/u/david.blythe)\
**Post date:** [November 3, 2026, 3:51pm UTC](https://discourse.mailinabox.email/t/linux-kernel-tcp-rce-vulnerability-cve-2026-98432/17122/4 "2026-11-03T15:51:26Z")

</div>

Here are the official Mitigation Instructions, different than above:

[https://ubuntu.com/security/CVE-2026-98432#mitigation](https://ubuntu.com/security/CVE-2026-98432#mitigation)