---
title: "Security digest: November 1, 2026"
url: https://erroneo.us/security/2026-11-01/
description: "November 1, 2026 vulnerability digest: 1 brief (Linux IPv4 TCP Use-After-Free CVE-2026-98432…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2026-11-01
date_modified: 2026-11-01
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: November 1, 2026

1 editorial brief.

## Take stock

- Patch this week: Linux IPv4 TCP Use-After-Free CVE-2026-98432: Remote RCE . Anyone running internet- or tenant-facing Linux servers on kernels 4.4 and later that lack the October 2026 fix, especially hosts serving Go 1.24+ programs or other MPTCP listeners.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Patch this week** [Linux IPv4 TCP Use-After-Free CVE-2026-98432: Remote RCE](https://erroneo.us/security/briefs/linux-tcp-ipv4-options-uaf-cve-2026-98432/index.md): A working, unpublished root exploit over plain TCP exists for servers with an MPTCP listener, which every Go 1.24+ server on Linux opens by default; boot a fixed kernel this week and prioritize internet-facing hosts.

## Known exploited (CISA KEV)

None.

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2026-11-01/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt