Patch · 3 sources · latest 2h

Trail of Bits uses Codex to speed up backporting security fixes to stable Linux releases

PATCHCVE-2026-98432redteam/daily · 3 sources

Severity: Medium
Highest CVSS: 9.8
Exploited: Not known
Sources: 3

What happened

Many older, stable versions of software never receive security fixes that are added to the newest version, because moving those fixes back is slow and thankless work. Trail of Bits says it used AI tools to make this much faster, helping deliver fixes for 149 vulnerabilities into stable Linux kernel releases.

Like I’m new · Written by AI from 3 sources · Wrong?

What to do

Check whether your distribution kernel includes the upstream fix for CVE-2026-98432 and apply the vendor update once it is released.
Apply stable kernel and distribution security updates promptly rather than relying on the latest upstream version alone.

Written by AI from the sources, checked against them

Read the full story at the source

Vulnerabilities

CVE-2026-98432CVSS 9.8In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can concurrently process a retransmit

Full story timeline · 4 updates

Who reported · 3 outlets

Fortinet PSIRT AdvisoriesTrail of BitsSANS Internet Storm Center