Critical Linux TCP flaw leaves major distributions awaiting fixes
A Linux kernel use-after-free in IPv4 TCP handshakes has received a critical CVSS 9.8 rating, and affected systems may be reachable remotely before application authentication. Fixed upstream kernels exist, but Ubuntu and RHEL still listed affected releases as vulnerable on October 31. The report attributes a working root-command exploit on systems with multipath TCP listeners to Anthropic, while noting that the exploit has not been published or independently tested. Administrators should track distribution fixes, reboot after patching and treat mitigations as temporary.














