{"id":14224,"date":"2026-10-30T09:27:00","date_gmt":"2026-10-30T08:27:00","guid":{"rendered":"https:\/\/www.infordisa.com\/soc\/?p=14224"},"modified":"2026-10-30T09:29:13","modified_gmt":"2026-10-30T08:29:13","slug":"cve-2026-98432-vulnerabilidad-kernel-linux","status":"publish","type":"post","link":"https:\/\/www.infordisa.com\/soc\/cve-2026-98432-vulnerabilidad-kernel-linux\/","title":{"rendered":"CVE-2026-98432: vulnerabilidad cr\u00edtica en el kernel de Linux que afecta a Ubuntu y RHEL"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"14224\" class=\"elementor elementor-14224\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-f8f936c elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"f8f936c\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-ac6cd5a\" data-id=\"ac6cd5a\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-192c335 elementor-widget elementor-widget-shortcode\" data-id=\"192c335\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\"><span style=\"color: #c02b23;font-weight: bold\">Cr&iacute;tica <\/span><img loading=\"lazy\" decoding=\"async\" width=\"10\" height=\"10\" src=\"https:\/\/www.infordisa.com\/soc\/imgs\/alerta-5.png\" alt=\"Alerta 5\"\/><\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ca19c7c elementor-widget elementor-widget-text-editor\" data-id=\"ca19c7c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div><strong><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2026-98432\" target=\"_blank\" rel=\"noopener\">CVE-2026-98432<\/a><\/strong><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-62e7b32 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"62e7b32\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7999ab7 elementor-toc--content-ellipsis elementor-toc--minimized-on-mobile elementor-widget elementor-widget-table-of-contents\" data-id=\"7999ab7\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings='{\"headings_by_tags\":[\"h2\"],\"exclude_headings_by_selector\":[],\"marker_view\":\"bullets\",\"icon\":{\"value\":\"fas fa-chevron-right\",\"library\":\"fa-solid\"},\"no_headings_message\":\"No se ha encontrado ning\\u00fan encabezado en esta p\\u00e1gina.\",\"minimized_on\":\"mobile\",\"minimize_box\":\"yes\",\"hierarchical_view\":\"yes\",\"min_height\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"min_height_tablet\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]},\"min_height_mobile\":{\"unit\":\"px\",\"size\":\"\",\"sizes\":[]}}' data-widget_type=\"table-of-contents.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__header\">\n\t\t\t\t\t\t<h4 class=\"elementor-toc__header-title\">\n\t\t\t\tTabla de contenidos\t\t\t<\/h4>\n\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--expand\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__7999ab7\" aria-expanded=\"true\" aria-label=\"Abrir la tabla de contenidos\"><i aria-hidden=\"true\" class=\"fas fa-chevron-down\"><\/i><\/div>\n\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--collapse\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__7999ab7\" aria-expanded=\"true\" aria-label=\"Cerrar la tabla de contenidos\"><i aria-hidden=\"true\" class=\"fas fa-chevron-up\"><\/i><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<div id=\"elementor-toc__7999ab7\" class=\"elementor-toc__body\">\n\t\t\t<div class=\"elementor-toc__spinner-container\">\n\t\t\t\t<i class=\"elementor-toc__spinner eicon-animation-spin eicon-loading\" aria-hidden=\"true\"><\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a9073a2 elementor-widget elementor-widget-text-editor\" data-id=\"a9073a2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2 id=\"resumen\">Resumen<\/h2><p><a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/cve\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">CVE<\/a>-2026-98432 es un fallo cr&iacute;tico en el c&oacute;digo TCP\/IPv4 del kernel de Linux que puede permitir a un atacante remoto, sin credenciales, ejecutar c&oacute;digo como root. La informaci&oacute;n de Ubuntu es correcta y coincide con Debian, el registro CVE y la prensa especializada.<\/p><table><colgroup> <col> <col><\/colgroup><tbody><tr><th colspan=\"1\" rowspan=\"1\">Dato<\/th><th colspan=\"1\" rowspan=\"1\">Valor<\/th><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Componente<\/td><td colspan=\"1\" rowspan=\"1\">Kernel de Linux, gesti&oacute;n del handshake TCP en IPv4<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Tipo<\/td><td colspan=\"1\" rowspan=\"1\">Condici&oacute;n de carrera que provoca uso de memoria liberada (use-after-free)<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Gravedad<\/td><td colspan=\"1\" rowspan=\"1\">CVSS 3.1: 9.8 Cr&iacute;tica (equipo CVE del kernel). CVSS 4.0: 8.3 Alta. Prioridad Ubuntu: Alta<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Publicado<\/td><td colspan=\"1\" rowspan=\"1\">15 de octubre de 2026 (puntuaci&oacute;n 9.8 asignada el 24 de octubre)<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Vector<\/td><td colspan=\"1\" rowspan=\"1\">Red, sin <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/autenticacion\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">autenticaci&oacute;n<\/a> ni interacci&oacute;n del usuario<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Exploit<\/td><td colspan=\"1\" rowspan=\"1\">Existe un <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/exploit\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">exploit<\/a> funcional desarrollado por Anthropic (anunciado el 27 de octubre); no es p&uacute;blico<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Explotaci&oacute;n activa<\/td><td colspan=\"1\" rowspan=\"1\">No confirmada. No figura en el cat&aacute;logo KEV de CISA a 29 de octubre<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Parche Ubuntu<\/td><td colspan=\"1\" rowspan=\"1\">En preparaci&oacute;n, a&uacute;n no publicado para ninguna versi&oacute;n<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Parche RHEL<\/td><td colspan=\"1\" rowspan=\"1\">No publicado a 29 de octubre<\/td><\/tr><\/tbody><\/table><p><strong>Acci&oacute;n:<\/strong> inventariar servidores Linux expuestos a Internet, aplicar el kernel corregido en cuanto lo publique cada distribuci&oacute;n y reiniciar.<\/p><h2 id=\"detalles-t&eacute;cnicos\">Detalles t&eacute;cnicos<\/h2><p>Al completar una conexi&oacute;n TCP, el kernel traspasa al nuevo socket las opciones IP de la petici&oacute;n pendiente sin copiarlas. Si ese socket se destruye mientras otro n&uacute;cleo de CPU las usa para responder a un SYN retransmitido, el kernel accede a memoria ya liberada (<a href=\"https:\/\/ubuntu.com\/security\/CVE-2026-98432\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Ubuntu<\/a>).<\/p><ul><li><strong>Origen:<\/strong> introducido en Linux 4.4 (commit 079096f), por lo que afecta a pr&aacute;cticamente todos los kernels en uso.<\/li><li><strong>Segundo escenario:<\/strong> la migraci&oacute;n de peticiones de socket (<code spellcheck=\"false\">net.ipv4.tcp_migrate_req=1<\/code> o programas BPF de reuseport) tiene el mismo problema.<\/li><li><strong>IPv6:<\/strong> no afectado por el fallo principal, porque el kernel copia las opciones. Queda un caso residual con CALIPSO que se corregir&aacute; aparte.<\/li><li><strong>Correcci&oacute;n:<\/strong> liberar las opciones tras un periodo de gracia RCU (<code spellcheck=\"false\">kfree_rcu()<\/code>), commit e3f33b0, incluido en 7.3-rc7.<\/li><li><strong>Versiones upstream corregidas:<\/strong> 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.56, 7.2.10 y 7.3 (<a href=\"https:\/\/thehackernews.com\/2026\/10\/linux-kernel-tcp-flaw-with-98-cvss.html\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">The Hacker News<\/a>).<\/li><li><strong>Exploit:<\/strong> seg&uacute;n Anthropic, su modelo obtuvo root remoto en servidores con un listener de multipath TCP (MPTCP), en menos de una hora.<\/li><\/ul><h2 id=\"est&aacute;-parcheado-ubuntu-estado-por-distribuci&oacute;n\">&iquest;Est&aacute; parcheado Ubuntu? Estado por distribuci&oacute;n<\/h2><p>Todas las versiones de Ubuntu con soporte siguen vulnerables; Debian, Oracle Linux y Amazon Linux ya tienen correcci&oacute;n. Estado a 29&ndash;30 de octubre de 2026.<\/p><table><colgroup> <col> <col> <col> <col><\/colgroup><tbody><tr><th colspan=\"1\" rowspan=\"1\">Distribuci&oacute;n<\/th><th colspan=\"1\" rowspan=\"1\">Versi&oacute;n<\/th><th colspan=\"1\" rowspan=\"1\">Estado<\/th><th colspan=\"1\" rowspan=\"1\">Kernel corregido \/ previsto<\/th><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Ubuntu<\/td><td colspan=\"1\" rowspan=\"1\">26.10<\/td><td colspan=\"1\" rowspan=\"1\">Vulnerable, parche en preparaci&oacute;n<\/td><td colspan=\"1\" rowspan=\"1\">7.3.0-10.10<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Ubuntu<\/td><td colspan=\"1\" rowspan=\"1\">26.04 LTS<\/td><td colspan=\"1\" rowspan=\"1\">Vulnerable, parche en preparaci&oacute;n<\/td><td colspan=\"1\" rowspan=\"1\">7.0.0-43.43<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Ubuntu<\/td><td colspan=\"1\" rowspan=\"1\">24.04 LTS<\/td><td colspan=\"1\" rowspan=\"1\">Vulnerable, parche en preparaci&oacute;n<\/td><td colspan=\"1\" rowspan=\"1\">6.8.0-149.149<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Ubuntu<\/td><td colspan=\"1\" rowspan=\"1\">22.04 LTS<\/td><td colspan=\"1\" rowspan=\"1\">Vulnerable, parche en preparaci&oacute;n<\/td><td colspan=\"1\" rowspan=\"1\">5.15.0-203.213<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Ubuntu<\/td><td colspan=\"1\" rowspan=\"1\">20.04 \/ 18.04 \/ 16.04 (ESM, Ubuntu Pro)<\/td><td colspan=\"1\" rowspan=\"1\">Vulnerable<\/td><td colspan=\"1\" rowspan=\"1\">Sin versi&oacute;n anunciada<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Debian<\/td><td colspan=\"1\" rowspan=\"1\">13 trixie<\/td><td colspan=\"1\" rowspan=\"1\">Corregido<\/td><td colspan=\"1\" rowspan=\"1\">6.12.113-1 (DSA-6568-1)<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Debian<\/td><td colspan=\"1\" rowspan=\"1\">12 bookworm<\/td><td colspan=\"1\" rowspan=\"1\">Corregido<\/td><td colspan=\"1\" rowspan=\"1\">6.1.190-1 (DLA-4841-1)<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Red Hat Enterprise Linux<\/td><td colspan=\"1\" rowspan=\"1\">Todas<\/td><td colspan=\"1\" rowspan=\"1\">Sin parche publicado<\/td><td colspan=\"1\" rowspan=\"1\">&mdash;<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Oracle Linux (UEK)<\/td><td colspan=\"1\" rowspan=\"1\">7, 8, 9, 10<\/td><td colspan=\"1\" rowspan=\"1\">Corregido<\/td><td colspan=\"1\" rowspan=\"1\">ELSA-2026-500397\/398\/399<\/td><\/tr><tr><td colspan=\"1\" rowspan=\"1\">Amazon Linux<\/td><td colspan=\"1\" rowspan=\"1\">2023<\/td><td colspan=\"1\" rowspan=\"1\">Corregido<\/td><td colspan=\"1\" rowspan=\"1\">ALAS2023-2026-3251, -3335<\/td><\/tr><\/tbody><\/table><p>En Ubuntu tambi&eacute;n est&aacute;n afectados los kernels espec&iacute;ficos de nube (AWS, Azure, GCP, Oracle), HWE, low-latency, FIPS, Raspberry Pi y realtime. El listado completo est&aacute; en la <a href=\"https:\/\/ubuntu.com\/security\/CVE-2026-98432\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">ficha de Ubuntu<\/a>; el de Debian en su <a href=\"https:\/\/security-tracker.debian.org\/tracker\/CVE-2026-98432\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">security tracker<\/a>.<\/p><h2 id=\"c&oacute;mo-proteger-tus-servidores-linux\">C&oacute;mo proteger tus servidores Linux<\/h2><p>La &uacute;nica soluci&oacute;n definitiva es instalar el kernel corregido y reiniciar. Hasta entonces, priorizar los servidores accesibles desde Internet.<\/p><ol><li><strong>Inventariar<\/strong> los servidores Linux y su kernel con <code spellcheck=\"false\">uname -r<\/code>; empezar por los expuestos a Internet.<\/li><li><strong>Debian, Oracle Linux y Amazon Linux:<\/strong> actualizar ya y reiniciar.<\/li><li><strong>Ubuntu:<\/strong> vigilar la ficha del <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/cve\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">CVE<\/a> y, cuando salga el parche, ejecutar <code spellcheck=\"false\">sudo apt update &amp;&amp; sudo apt full-upgrade<\/code> y reiniciar. Con Ubuntu Pro, <code spellcheck=\"false\">sudo pro fix CVE-2026-98432<\/code> indica el estado y aplica la correcci&oacute;n cuando exista.<\/li><li><strong>Livepatch:<\/strong> donde est&eacute; activo, comprobar con <code spellcheck=\"false\">canonical-livepatch status<\/code> si cubre este CVE; no sustituye al reinicio programado.<\/li><li><strong>RHEL y derivados:<\/strong> seguir el bolet&iacute;n de Red Hat y aplicar en cuanto est&eacute; disponible.<\/li><li><strong>Kernels compilados a mano:<\/strong> subir a una versi&oacute;n corregida (ver Detalles t&eacute;cnicos).<\/li><\/ol><p><strong>Reducci&oacute;n de riesgo temporal (no oficial, probar antes en preproducci&oacute;n):<\/strong><\/p><ul><li>Desactivar MPTCP si no se usa: <code spellcheck=\"false\">sysctl -w net.mptcp.enabled=0<\/code>. Cierra la v&iacute;a del exploit descrito, no el fallo de fondo.<\/li><li>Mantener <code spellcheck=\"false\">net.ipv4.tcp_migrate_req=0<\/code> (valor por defecto).<\/li><li>Valorar filtrar en el <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/firewall\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">firewall<\/a> perimetral los paquetes IPv4 entrantes con opciones IP, que el tr&aacute;fico leg&iacute;timo apenas usa.<\/li><li>Restringir los puertos TCP expuestos a lo estrictamente necesario.<\/li><\/ul><h2 id=\"fuentes\" data-lfile-container=\"80b367d8-e34d-4423-a282-0506d2d04a63\" data-pm-slice=\"1 3 []\">Fuentes<\/h2><ul><li><a href=\"https:\/\/ubuntu.com\/security\/CVE-2026-98432\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Ubuntu Security &ndash; CVE-2026-98432<\/a><\/li><li><a href=\"https:\/\/security-tracker.debian.org\/tracker\/CVE-2026-98432\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Debian Security Tracker &ndash; CVE-2026-98432<\/a><\/li><li><a href=\"https:\/\/thehackernews.com\/2026\/10\/linux-kernel-tcp-flaw-with-98-cvss.html\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">The Hacker News &ndash; Linux Kernel TCP Flaw With 9.8 CVSS Score<\/a><\/li><li><a href=\"https:\/\/www.rescana.com\/post\/linux-kernel-tcp-cve-2026-98432-use-after-free-prepare-now\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Rescana &ndash; Linux Kernel CVE-2026-98432<\/a><\/li><li><a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-98432\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Registro CVE (cve.org)<\/a><\/li><li><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-98432\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">NVD<\/a><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Vulnerabilidad cr&iacute;tica en TCP del kernel Linux permite ejecuci&oacute;n remota como root. Estado de parches en Ubuntu, Debian y RHEL, y c&oacute;mo protegerte.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[4],"tags":[96,147],"class_list":["post-14224","post","type-post","status-publish","format-standard","hentry","category-alertas-de-seguridad","tag-linux","tag-vulnerabilidad","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-25"],"acf":[],"yoast_head":"<title>CVE-2026-98432: vulnerabilidad cr\u00edtica en el kernel de Linux que afecta a Ubuntu y RHEL - INFORDISA \/ Security Operations Center<\/title>\n<meta name=\"description\" content=\"Vulnerabilidad cr\u00edtica en TCP del kernel Linux permite ejecuci\u00f3n remota como root. Estado de parches en Ubuntu, Debian y RHEL, y c\u00f3mo protegerte.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infordisa.com\/soc\/cve-2026-98432-vulnerabilidad-kernel-linux\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CVE-2026-98432: vulnerabilidad cr\u00edtica en el kernel de Linux que afecta a Ubuntu y RHEL - INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"og:description\" content=\"Vulnerabilidad cr\u00edtica en TCP del kernel Linux permite ejecuci\u00f3n remota como root. Estado de parches en Ubuntu, Debian y RHEL, y c\u00f3mo protegerte.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infordisa.com\/soc\/cve-2026-98432-vulnerabilidad-kernel-linux\/\" \/>\n<meta property=\"og:site_name\" content=\"INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infordisa\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-30T08:27:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-30T08:29:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/10\/alerta-SOC.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jordi Sala\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/10\/alerta-SOC.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@infordisa\" \/>\n<meta name=\"twitter:site\" content=\"@infordisa\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jordi Sala\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/cve-2026-98432-vulnerabilidad-kernel-linux\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/cve-2026-98432-vulnerabilidad-kernel-linux\\\/\"},\"author\":{\"name\":\"Jordi Sala\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\"},\"headline\":\"CVE-2026-98432: vulnerabilidad cr\u00edtica en el kernel de Linux que afecta a Ubuntu y RHEL\",\"datePublished\":\"2026-10-30T08:27:00+00:00\",\"dateModified\":\"2026-10-30T08:29:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/cve-2026-98432-vulnerabilidad-kernel-linux\\\/\"},\"wordCount\":739,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"keywords\":[\"linux\",\"Vulnerabilidad\"],\"articleSection\":[\"Alertas de seguridad\"],\"inLanguage\":\"es\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/cve-2026-98432-vulnerabilidad-kernel-linux\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/cve-2026-98432-vulnerabilidad-kernel-linux\\\/\",\"name\":\"CVE-2026-98432: vulnerabilidad cr\u00edtica en el kernel de Linux que afecta a Ubuntu y RHEL - INFORDISA \\\/ Security Operations Center\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\"},\"datePublished\":\"2026-10-30T08:27:00+00:00\",\"dateModified\":\"2026-10-30T08:29:13+00:00\",\"description\":\"Vulnerabilidad cr\u00edtica en TCP del kernel Linux permite ejecuci\u00f3n remota como root. Estado de parches en Ubuntu, Debian y RHEL, y c\u00f3mo protegerte.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/cve-2026-98432-vulnerabilidad-kernel-linux\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/cve-2026-98432-vulnerabilidad-kernel-linux\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/cve-2026-98432-vulnerabilidad-kernel-linux\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CVE-2026-98432: vulnerabilidad cr\u00edtica en el kernel de Linux que afecta a Ubuntu y RHEL\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"description\":\"Portal de Ciberseguridad\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"width\":400,\"height\":34,\"caption\":\"INFORDISA \\\/ Security Operations Center\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/infordisa\\\/\",\"https:\\\/\\\/x.com\\\/infordisa\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/infordisa\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/InfordisaTV\",\"https:\\\/\\\/www.instagram.com\\\/infordisa\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\",\"name\":\"Jordi Sala\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"caption\":\"Jordi Sala\"},\"description\":\"Marketing\",\"sameAs\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"],\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/author\\\/jsala\\\/\"}]}<\/script>","yoast_head_json":{"title":"CVE-2026-98432: vulnerabilidad cr\u00edtica en el kernel de Linux que afecta a Ubuntu y RHEL - INFORDISA \/ Security Operations Center","description":"Vulnerabilidad cr\u00edtica en TCP del kernel Linux permite ejecuci\u00f3n remota como root. Estado de parches en Ubuntu, Debian y RHEL, y c\u00f3mo protegerte.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infordisa.com\/soc\/cve-2026-98432-vulnerabilidad-kernel-linux\/","og_locale":"es_ES","og_type":"article","og_title":"CVE-2026-98432: vulnerabilidad cr\u00edtica en el kernel de Linux que afecta a Ubuntu y RHEL - INFORDISA \/ Security Operations Center","og_description":"Vulnerabilidad cr\u00edtica en TCP del kernel Linux permite ejecuci\u00f3n remota como root. Estado de parches en Ubuntu, Debian y RHEL, y c\u00f3mo protegerte.","og_url":"https:\/\/www.infordisa.com\/soc\/cve-2026-98432-vulnerabilidad-kernel-linux\/","og_site_name":"INFORDISA \/ Security Operations Center","article_publisher":"https:\/\/www.facebook.com\/infordisa\/","article_published_time":"2026-10-30T08:27:00+00:00","article_modified_time":"2026-10-30T08:29:13+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/10\/alerta-SOC.jpg","type":"image\/jpeg"}],"author":"Jordi Sala","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2026\/10\/alerta-SOC.jpg","twitter_creator":"@infordisa","twitter_site":"@infordisa","twitter_misc":{"Escrito por":"Jordi Sala","Tiempo de lectura":"4 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infordisa.com\/soc\/cve-2026-98432-vulnerabilidad-kernel-linux\/#article","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/cve-2026-98432-vulnerabilidad-kernel-linux\/"},"author":{"name":"Jordi Sala","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375"},"headline":"CVE-2026-98432: vulnerabilidad cr\u00edtica en el kernel de Linux que afecta a Ubuntu y RHEL","datePublished":"2026-10-30T08:27:00+00:00","dateModified":"2026-10-30T08:29:13+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infordisa.com\/soc\/cve-2026-98432-vulnerabilidad-kernel-linux\/"},"wordCount":739,"publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"keywords":["linux","Vulnerabilidad"],"articleSection":["Alertas de seguridad"],"inLanguage":"es"},{"@type":"WebPage","@id":"https:\/\/www.infordisa.com\/soc\/cve-2026-98432-vulnerabilidad-kernel-linux\/","url":"https:\/\/www.infordisa.com\/soc\/cve-2026-98432-vulnerabilidad-kernel-linux\/","name":"CVE-2026-98432: vulnerabilidad cr\u00edtica en el kernel de Linux que afecta a Ubuntu y RHEL - INFORDISA \/ Security Operations Center","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/#website"},"datePublished":"2026-10-30T08:27:00+00:00","dateModified":"2026-10-30T08:29:13+00:00","description":"Vulnerabilidad cr\u00edtica en TCP del kernel Linux permite ejecuci\u00f3n remota como root. Estado de parches en Ubuntu, Debian y RHEL, y c\u00f3mo protegerte.","breadcrumb":{"@id":"https:\/\/www.infordisa.com\/soc\/cve-2026-98432-vulnerabilidad-kernel-linux\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infordisa.com\/soc\/cve-2026-98432-vulnerabilidad-kernel-linux\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.infordisa.com\/soc\/cve-2026-98432-vulnerabilidad-kernel-linux\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/www.infordisa.com\/soc\/"},{"@type":"ListItem","position":2,"name":"CVE-2026-98432: vulnerabilidad cr\u00edtica en el kernel de Linux que afecta a Ubuntu y RHEL"}]},{"@type":"WebSite","@id":"https:\/\/www.infordisa.com\/soc\/#website","url":"https:\/\/www.infordisa.com\/soc\/","name":"INFORDISA \/ Security Operations Center","description":"Portal de Ciberseguridad","publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infordisa.com\/soc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/www.infordisa.com\/soc\/#organization","name":"INFORDISA \/ Security Operations Center","url":"https:\/\/www.infordisa.com\/soc\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","width":400,"height":34,"caption":"INFORDISA \/ Security Operations Center"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infordisa\/","https:\/\/x.com\/infordisa","https:\/\/www.linkedin.com\/company\/infordisa","https:\/\/www.youtube.com\/user\/InfordisaTV","https:\/\/www.instagram.com\/infordisa\/"]},{"@type":"Person","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375","name":"Jordi Sala","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","caption":"Jordi Sala"},"description":"Marketing","sameAs":["https:\/\/www.infordisa.com\/soc\/"],"url":"https:\/\/www.infordisa.com\/soc\/author\/jsala\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/14224","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/comments?post=14224"}],"version-history":[{"count":8,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/14224\/revisions"}],"predecessor-version":[{"id":14233,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/14224\/revisions\/14233"}],"wp:attachment":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/media?parent=14224"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/categories?post=14224"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/tags?post=14224"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}