and0x000
/ cve-2026-98432.yml
Last active
November 3, 2026 17:09
CVE-2026-98432 debian check playbook
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| # Fails on every host whose *running* kernel is affected by CVE-2026-98432 | |
| # (IPv4 TCP inet_opt/ireq_opt use-after-free, remotely triggerable). | |
| # | |
| # Debian kernels: package version from `uname -v` (e.g. "Debian 6.1.190-1") | |
| # compared via dpkg against the Debian security tracker: | |
| # https://security-tracker.debian.org/tracker/CVE-2026-98432 | |
| # Everything else (Ubuntu, Proxmox, EOL Debian branches, vanilla): upstream | |
| # version from `uname -r` compared against the fixed stable releases of the | |
| # kernel CNA record. Distro backports that keep the upstream version number |