{"id":14174,"date":"2026-10-30T16:09:50","date_gmt":"2026-10-30T08:09:50","guid":{"rendered":"https:\/\/infernews.com\/blog\/?page_id=14174"},"modified":"2026-10-30T16:21:18","modified_gmt":"2026-10-30T08:21:18","slug":"cve-2026-98432-linux","status":"publish","type":"page","link":"https:\/\/infernews.com\/blog\/cve-2026-98432-linux\/","title":{"rendered":"\u00a0CVE-2026-98432 Linux \u7cfb\u7d71\u7684\u6975\u9ad8\u5371\u96aa\u6f0f\u6d1e"},"content":{"rendered":"\n<figure class=\"wp-block-image size-full\"><img data-dominant-color=\"c7cfdd\" data-has-transparency=\"false\" style=\"--dominant-color: #c7cfdd;\" loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"397\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" src=\"https:\/\/infernews.com\/blog\/wp-content\/uploads\/2026\/10\/CVE-2026-98432-Linux.jpg\" alt=\"\" class=\"wp-image-14177 not-transparent\" srcset=\"https:\/\/infernews.com\/blog\/wp-content\/uploads\/2026\/10\/CVE-2026-98432-Linux.jpg 1024w, https:\/\/infernews.com\/blog\/wp-content\/uploads\/2026\/10\/CVE-2026-98432-Linux-300x116.jpg 300w, https:\/\/infernews.com\/blog\/wp-content\/uploads\/2026\/10\/CVE-2026-98432-Linux-766x297.jpg 766w\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u91dd\u5c0d Linux \u6838\u5fc3 TCP \u5b50\u7cfb\u7d71\u8fd1\u671f\u7206\u767c\u7684\u6975\u9ad8\u5371\u96aa\u6f0f\u6d1e <strong>CVE-2026-98432<\/strong>\uff08CVSS \u8a55\u5206\u9ad8\u9054 9.8\uff09\uff0c\u672c\u6587\u70ba\u7cfb\u7d71\u7ba1\u7406\u54e1\u8207\u96f2\u7aef\u7dad\u904b\u5718\u968a\u63d0\u4f9b\u5b8c\u6574\u7684\u6f0f\u6d1e\u89e3\u6790\u3001\u5f71\u97ff\u7bc4\u570d\u8a55\u4f30\u53ca\u7dca\u6025\u9632\u8b77\u5c0d\u7b56\u3002\u7531\u65bc\u4e3b\u6d41\u767c\u884c\u7248\u5b98\u65b9\u4fee\u88dc\u7a0b\u5f0f\u767c\u5e03\u5b58\u5728\u6642\u9593\u5dee\uff0c\u638c\u63e1\u5373\u6642\u61c9\u8b8a\u8207\u4e3b\u52d5\u9632\u79a6\u6210\u70ba\u5b88\u8b77\u57fa\u790e\u8a2d\u65bd\u7684\u95dc\u9375\u3002<\/p>\n\n\n\n<style>\n\/* ==========================================================================\n   WordPress Scoped Article \u5b8c\u6574\u6a23\u5f0f\u8868\uff08\u5f37\u5236\u56fa\u5b9a\u5927\u5b57\u7d1a\u9632\u7e2e\u5c0f\u7248\uff09\n   ========================================================================== *\/\nhtml {\n  scroll-behavior: smooth;\n}\n\n\/* \u6838\u5fc3\u5bb9\u5668\uff1a\u5f37\u5236\u9396\u5b9a 21px \u57fa\u790e\u5b57\u7d1a\u8207 1.8 \u884c\u9ad8\uff0c\u675c\u7d55\u88ab\u4e3b\u984c\u8986\u84cb\u7e2e\u5c0f *\/\n.wp-scoped-article {\n  font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Noto Sans TC\", sans-serif !important;\n  color: #1e293b !important;\n  line-height: 1.8 !important;\n  font-size: 21px !important;\n  margin: 1.5rem 0 !important;\n  box-sizing: border-box !important;\n}\n\n.wp-scoped-article * {\n  box-sizing: border-box !important;\n}\n\n\/* \u907f\u514d\u6587\u7ae0\u5167 header \/ footer \u7e7c\u627f\u885d\u7a81 *\/\n.wp-scoped-article header,\n.wp-scoped-article footer,\n.wp-scoped-article .in-article-header,\n.wp-scoped-article .in-article-footer {\n  position: static !important;\n  width: 100% !important;\n  background: transparent !important;\n  border: none !important;\n  box-shadow: none !important;\n  padding: 0 !important;\n  margin: 1.5rem 0 !important;\n  clear: both !important;\n}\n\n.wp-scoped-article footer,\n.wp-scoped-article .in-article-footer {\n  padding-top: 1.25rem !important;\n  border-top: 1px solid #e2e8f0 !important;\n}\n\n\/* \u6a19\u984c\u7cfb\u7d71 *\/\n.wp-scoped-article h2 {\n  font-size: 32px !important;\n  font-weight: 700 !important;\n  color: #0f172a !important;\n  margin-top: 2.25rem !important;\n  margin-bottom: 1rem !important;\n  padding-bottom: 0.5rem !important;\n  border-bottom: 2px solid #e2e8f0 !important;\n  display: flex !important;\n  align-items: center !important;\n  gap: 0.5rem !important;\n  scroll-margin-top: 80px !important;\n}\n\n.wp-scoped-article h3 {\n  font-size: 26px !important;\n  font-weight: 600 !important;\n  color: #1e293b !important;\n  margin-top: 1.6rem !important;\n  margin-bottom: 0.75rem !important;\n  scroll-margin-top: 80px !important;\n}\n\n\/* \u5167\u6587\u8207\u9023\u7d50 *\/\n.wp-scoped-article p,\n.wp-scoped-article li {\n  font-size: 21px !important;\n  line-height: 1.8 !important;\n  margin-bottom: 1.2rem !important;\n  color: #334155 !important;\n}\n\n.wp-scoped-article a {\n  color: #2563eb !important;\n  text-decoration: none !important;\n}\n\n.wp-scoped-article a:hover {\n  text-decoration: underline !important;\n}\n\n\/* \u76ee\u9304\u5c0e\u89bd (TOC) *\/\n.wp-scoped-article .in-toc {\n  background: #f8fafc !important;\n  border: 1px solid #e2e8f0 !important;\n  border-radius: 8px !important;\n  padding: 1.5rem !important;\n  margin: 1.5rem 0 !important;\n}\n\n.wp-scoped-article .in-toc ul {\n  list-style: none !important;\n  padding-left: 0 !important;\n  margin: 0 !important;\n}\n\n.wp-scoped-article .in-toc li {\n  margin-bottom: 0.5rem !important;\n  font-size: 19px !important;\n}\n\n.wp-scoped-article .in-toc a {\n  text-decoration: none !important;\n  color: #2563eb !important;\n}\n\n.wp-scoped-article .in-toc a:hover {\n  opacity: 0.8 !important;\n  text-decoration: none !important;\n}\n\n\/* \u6a19\u7c64\u81a0\u56ca\u6c23\u6ce1 *\/\n.wp-scoped-article .in-tag-group {\n  display: flex !important;\n  flex-wrap: wrap !important;\n  gap: 10px !important;\n  margin-bottom: 1.5rem !important;\n}\n\n.wp-scoped-article .in-tag,\n.wp-scoped-article a.in-tag {\n  display: inline-block !important;\n  padding: 6px 18px !important;\n  border-radius: 9999px !important;\n  font-size: 18px !important;\n  font-weight: 600 !important;\n  background-color: #eff6ff !important;\n  color: #1d4ed8 !important;\n  border: 1.5px solid #bfdbfe !important;\n  text-decoration: none !important;\n  line-height: 1.4 !important;\n  transition: all 0.2s ease-in-out !important;\n}\n\n.wp-scoped-article a.in-tag:hover {\n  background-color: #dbeafe !important;\n  border-color: #93c5fd !important;\n  color: #1e40af !important;\n  text-decoration: none !important;\n  transform: translateY(-1px) !important;\n}\n\n\/* \u5e8f\u865f\u5fbd\u7ae0 *\/\n.wp-scoped-article .in-badge {\n  display: inline-flex !important;\n  align-items: center !important;\n  justify-content: center !important;\n  width: 32px !important;\n  height: 32px !important;\n  border-radius: 6px !important;\n  background: #2563eb !important;\n  color: #ffffff !important;\n  font-size: 18px !important;\n  font-weight: 700 !important;\n  margin-right: 8px !important;\n  flex-shrink: 0 !important;\n}\n\n\/* \u63d0\u793a\u8a0a\u606f\u6846 *\/\n.wp-scoped-article .in-callout-info {\n  background-color: #eff6ff !important;\n  border-left: 5px solid #3b82f6 !important;\n  border-radius: 0 8px 8px 0 !important;\n  padding: 1.25rem 1.5rem !important;\n  margin: 1.5rem 0 !important;\n  font-size: 20px !important;\n}\n\n.wp-scoped-article .in-callout-danger {\n  background-color: #fef2f2 !important;\n  border-left: 5px solid #ef4444 !important;\n  border-radius: 0 8px 8px 0 !important;\n  padding: 1.25rem 1.5rem !important;\n  margin: 1.5rem 0 !important;\n  font-size: 20px !important;\n}\n\n\/* \u7d42\u7aef\u6a5f\u4ee3\u78bc\u5340\u584a *\/\n.wp-scoped-article .in-terminal-box {\n  background: #0d1117 !important;\n  border: 1px solid #30363d !important;\n  border-radius: 8px !important;\n  margin: 1.5rem 0 !important;\n  overflow: hidden !important;\n  box-shadow: 0 4px 12px rgba(0, 0, 0, 0.12) !important;\n}\n\n.wp-scoped-article .in-terminal-header {\n  background: #161b22 !important;\n  padding: 10px 16px !important;\n  display: flex !important;\n  align-items: center !important;\n  justify-content: space-between !important;\n  border-bottom: 1px solid #30363d !important;\n  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace !important;\n  font-size: 16px !important;\n  color: #8b949e !important;\n}\n\n.wp-scoped-article .in-terminal-dots {\n  display: flex !important;\n  gap: 6px !important;\n}\n\n.wp-scoped-article .in-dot {\n  width: 12px !important;\n  height: 12px !important;\n  border-radius: 50% !important;\n  display: inline-block !important;\n}\n\n.wp-scoped-article .in-dot-red { background: #ff5f56 !important; }\n.wp-scoped-article .in-dot-yellow { background: #ffbd2e !important; }\n.wp-scoped-article .in-dot-green { background: #27c93f !important; }\n\n.wp-scoped-article pre.in-code {\n  margin: 0 !important;\n  padding: 18px !important;\n  background: #0d1117 !important;\n  color: #c9d1d9 !important;\n  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace !important;\n  font-size: 17px !important;\n  line-height: 1.6 !important;\n  overflow-x: auto !important;\n  white-space: pre !important;\n  border: none !important;\n}\n\n\/* \u9ad8\u5c0d\u6bd4\u8868\u683c\uff08\u9396\u5b9a\u6e05\u6670\u5927\u5b57\u9ad4\uff09 *\/\n.wp-scoped-article div.in-table-wrapper {\n  overflow-x: auto !important;\n  margin: 1.5rem 0 !important;\n  border: 2px solid #94a3b8 !important;\n  border-radius: 8px !important;\n  background-color: #ffffff !important;\n}\n\n.wp-scoped-article .in-table-wrapper table.in-table,\n.wp-scoped-article table.in-table {\n  width: 100% !important;\n  border-collapse: collapse !important;\n  border-spacing: 0 !important;\n  font-size: 19px !important;\n  text-align: left !important;\n  margin: 0 !important;\n  border: none !important;\n}\n\n.wp-scoped-article .in-table-wrapper table.in-table th,\n.wp-scoped-article table.in-table th {\n  background-color: #e2e8f0 !important;\n  color: #0f172a !important;\n  font-weight: 700 !important;\n  padding: 14px 18px !important;\n  border-bottom: 2px solid #64748b !important;\n  border-right: 1px solid #cbd5e1 !important;\n  font-size: 19px !important;\n}\n\n.wp-scoped-article .in-table-wrapper table.in-table td,\n.wp-scoped-article table.in-table td {\n  padding: 14px 18px !important;\n  border-bottom: 1px solid #cbd5e1 !important;\n  border-right: 1px solid #cbd5e1 !important;\n  color: #334155 !important;\n  font-size: 19px !important;\n}\n\n.wp-scoped-article .in-table-wrapper table.in-table th:last-child,\n.wp-scoped-article .in-table-wrapper table.in-table td:last-child,\n.wp-scoped-article table.in-table th:last-child,\n.wp-scoped-article table.in-table td:last-child {\n  border-right: none !important;\n}\n\n.wp-scoped-article .in-table-wrapper table.in-table tbody tr:nth-child(even),\n.wp-scoped-article table.in-table tbody tr:nth-child(even) {\n  background-color: #f8fafc !important;\n}\n\n\/* \u7db2\u683c\u6838\u53d6\u6e05\u55ae *\/\n.wp-scoped-article .in-checklist {\n  display: grid !important;\n  grid-template-columns: repeat(auto-fit, minmax(260px, 1fr)) !important;\n  gap: 14px !important;\n  margin: 1.5rem 0 !important;\n}\n\n.wp-scoped-article .in-checklist-item {\n  display: flex !important;\n  align-items: center !important;\n  gap: 12px !important;\n  padding: 14px 18px !important;\n  background: #f8fafc !important;\n  border: 1px solid #e2e8f0 !important;\n  border-radius: 8px !important;\n  font-size: 19px !important;\n}\n\n.wp-scoped-article .in-check-icon {\n  color: #10b981 !important;\n  font-weight: bold !important;\n  font-size: 20px !important;\n}\n<\/style>\n\n<div class=\"wp-scoped-article\">\n  <div class=\"in-article-header\">\n    <div class=\"in-tag-group\">\n      <span class=\"in-tag\">Linux \u6838\u5fc3\u5b89\u5168<\/span>\n      <span class=\"in-tag\">CVSS 9.8<\/span>\n      <span class=\"in-tag\">CVE-2026-98432<\/span>\n      <span class=\"in-tag\">\u8cc7\u5b89\u9632\u8b77<\/span>\n    <\/div>\n  <\/div>\n\n  <div class=\"in-toc\">\n    <h3>\u6587\u7ae0\u76ee\u9304<\/h3>\n    <ul>\n      <li><a href=\"#overview\">1. \u6f0f\u6d1e\u6982\u8ff0\u8207\u8a55\u5206\u7d30\u7bc0 (CVE-2026-98432)<\/a><\/li>\n      <li><a href=\"#impact\">2. \u5f71\u97ff\u7bc4\u570d\u8207\u767c\u884c\u7248\u72c0\u614b<\/a><\/li>\n      <li><a href=\"#mechanism\">3. \u653b\u64ca\u6a5f\u5236\u8207\u5a01\u8105\u5206\u6790<\/a><\/li>\n      <li><a href=\"#mitigation\">4. \u7dca\u6025\u7de9\u89e3\u8207\u9632\u706b\u7246\u9632\u8b77\u8a2d\u5b9a<\/a><\/li>\n    <\/ul>\n  <\/div>\n\n  <h2 id=\"overview\"><span class=\"in-badge\">1<\/span>\u6f0f\u6d1e\u6982\u8ff0\u8207\u8a55\u5206\u7d30\u7bc0 (CVE-2026-98432)<\/h2>\n  <p><strong>CVE-2026-98432<\/strong> \u662f\u5b58\u5728\u65bc Linux \u6838\u5fc3 IPv4 TCP \u9023\u7dda\u5efa\u7acb\u7a0b\u5f0f\u78bc\u4e2d\u7684\u4e00\u9805\u56b4\u91cd\u7af6\u614b\u689d\u4ef6\uff08Race Condition\uff09\u8207\u8a18\u61b6\u9ad4\u91cb\u653e\u5f8c\u91cd\u7528\uff08Use-After-Free, UAF\uff09\u6f0f\u6d1e\u3002\u8a72\u6f0f\u6d1e\u5728\u570b\u5bb6\u6f0f\u6d1e\u8cc7\u6599\u5eab\uff08NVD\uff09\u4e2d\u7372\u5f97\u4e86 <strong>9.8<\/strong> \u7684\u6975\u9ad8 CVSS \u8a55\u5206\u3002<\/p>\n  \n  <div class=\"in-callout-danger\">\n    <strong>\u6700\u9ad8\u8b66\u6212\u8b66\u544a\uff1a<\/strong> \u6b64\u6f0f\u6d1e\u5177\u5099\u300c\u7db2\u8def\u653b\u64ca\u5411\u91cf\uff08Network Attack Vector\uff09\u300d\u3001\u300c\u4f4e\u653b\u64ca\u8907\u96dc\u5ea6\u300d\uff0c\u4e14<strong>\u4e0d\u9700\u8981\u4efb\u4f55\u8eab\u5206\u9a57\u8b49\u6216\u4f7f\u7528\u8005\u4e92\u52d5<\/strong>\u3002\u653b\u64ca\u8005\u53ef\u900f\u904e\u7db2\u969b\u7db2\u8def\u76f4\u63a5\u9060\u7aef\u767c\u52d5\u653b\u64ca\uff0c\u53d6\u5f97\u53d7\u5bb3\u4f3a\u670d\u5668\u7684 Root \u5c64\u7d1a\u63a7\u5236\u6b0a\u3002\n  <\/div>\n\n  <h2 id=\"impact\"><span class=\"in-badge\">2<\/span>\u5f71\u97ff\u7bc4\u570d\u8207\u767c\u884c\u7248\u72c0\u614b<\/h2>\n  <p>\u8a72\u6f0f\u6d1e\u5f71\u97ff\u81ea Linux 4.4 \u7248\u672c\u4ee5\u4f86\u7684\u5927\u591a\u6578\u4e3b\u6d41\u6838\u5fc3\u67b6\u69cb\u3002\u7531\u65bc\u6f0f\u6d1e\u7d30\u7bc0\u516c\u958b\u8207\u90e8\u5206\u4f01\u696d\u7d1a\u4f5c\u696d\u7cfb\u7d71\u4fee\u88dc\u91cb\u51fa\u5b58\u5728\u6642\u9593\u5dee\uff0c\u7dad\u904b\u5718\u968a\u5fc5\u9808\u76e4\u9ede\u7576\u524d\u904b\u4f5c\u74b0\u5883\u3002<\/p>\n\n  <div class=\"in-table-wrapper\">\n    <table class=\"in-table\">\n      <thead>\n        <tr>\n          <th>\u4f5c\u696d\u7cfb\u7d71 \/ \u767c\u884c\u7248<\/th>\n          <th>\u53d7\u5f71\u97ff\u7248\u672c\u7bc4\u570d<\/th>\n          <th>\u4fee\u88dc\u72c0\u614b (\u622a\u81f3 2026 \u5e74 10 \u6708\u4e0b\u65ec)<\/th>\n        <\/tr>\n      <\/thead>\n      <tbody>\n        <tr>\n          <td><strong>Ubuntu Linux<\/strong><\/td>\n          <td>\u5404\u4e3b\u8981\u7248\u672c (16.04 \u81f3 26.10)<\/td>\n          <td>\u5b98\u65b9\u6838\u5fc3\u4fee\u88dc\u66f4\u65b0\u9678\u7e8c\u63a8\u9032\u4e2d<\/td>\n        <\/tr>\n        <tr>\n          <td><strong>Red Hat Enterprise Linux (RHEL)<\/strong><\/td>\n          <td>RHEL 8, 9, 10 \/ OpenShift 4<\/td>\n          <td>\u90e8\u5206\u6838\u5fc3\u8a55\u4f30\u4e2d\uff0c\u5efa\u8b70\u5bc6\u5207\u95dc\u6ce8\u5b98\u65b9\u516c\u544a<\/td>\n        <\/tr>\n        <tr>\n          <td><strong>Amazon Linux 2023<\/strong><\/td>\n          <td>\u4f4e\u65bc\u6307\u5b9a\u6838\u5fc3\u7248\u672c<\/td>\n          <td>\u5df2\u91dd\u5c0d\u90e8\u5206\u7248\u672c\u91cb\u51fa\u4fee\u5fa9\u66f4\u65b0<\/td>\n        <\/tr>\n        <tr>\n          <td><strong>Debian \/ SUSE \/ Oracle<\/strong><\/td>\n          <td>\u4e3b\u6d41\u652f\u63f4\u7248\u672c<\/td>\n          <td>\u591a\u6578\u5df2\u91dd\u5c0d\u6838\u5fc3\u5957\u4ef6\u767c\u5e03\u4fee\u6b63\u6a94<\/td>\n        <\/tr>\n      <\/tbody>\n    <\/table>\n  <\/div>\n\n  <h2 id=\"mechanism\"><span class=\"in-badge\">3<\/span>\u653b\u64ca\u6a5f\u5236\u8207\u5a01\u8105\u5206\u6790<\/h2>\n  <p>\u6839\u64da\u8cc7\u5b89\u7814\u7a76\u8207\u4e8b\u4ef6\u901a\u5831\uff0c<code>tcp_v4_syn_recv_sock()<\/code> \u5728\u8655\u7406\u9023\u7dda\u9078\u9805\u8f49\u79fb\u6642\u51fa\u73fe\u7455\u75b5\uff0c\u5c0e\u81f4 <code>inet_opt<\/code> \u8207 <code>ireq_opt<\/code> \u5728\u672a\u7d93\u9069\u7576 RCU \u5bec\u9650\u671f\u4fdd\u8b77\u6216\u5b8c\u6574\u8907\u88fd\u7684\u60c5\u6cc1\u4e0b\u906d\u5230\u4e0d\u7576\u91cb\u653e\u8207\u8f49\u79fb\u3002\u653b\u64ca\u93c8\u901a\u5e38\u5305\u542b\u4ee5\u4e0b\u7279\u6027\uff1a<\/p>\n  \n  <div class=\"in-checklist\">\n    <div class=\"in-checklist-item\">\n      <span class=\"in-check-icon\">\u2713<\/span>\n      <span>\u7121\u9700\u4efb\u4f55\u9810\u5148\u5b58\u53d6\u6b0a\u9650\u6216\u5e33\u865f\u5bc6\u78bc<\/span>\n    <\/div>\n    <div class=\"in-checklist-item\">\n      <span class=\"in-check-icon\">\u2713<\/span>\n      <span>\u5229\u7528\u8a18\u61b6\u9ad4\u5167\u6838\u4f4d\u5740\u5916\u6d29\u7e5e\u904e KASLR \u9632\u8b77<\/span>\n    <\/div>\n    <div class=\"in-checklist-item\">\n      <span class=\"in-check-icon\">\u2713<\/span>\n      <span>\u8986\u5beb\u5167\u6838\u56de\u547c\u6307\u6a19\u9054\u6210\u9060\u7aef\u4ee3\u78bc\u57f7\u884c (RCE)<\/span>\n    <\/div>\n    <div class=\"in-checklist-item\">\n      <span class=\"in-check-icon\">\u2713<\/span>\n      <span>\u5177\u5099 AI \u52a0\u901f\u7279\u6027\uff0c\u81ea\u52d5\u5316\u63a2\u6e2c\u8207\u5229\u7528\u9580\u6abb\u964d\u4f4e<\/span>\n    <\/div>\n  <\/div>\n\n  <h2 id=\"mitigation\"><span class=\"in-badge\">4<\/span>\u7dca\u6025\u7de9\u89e3\u8207\u9632\u706b\u7246\u9632\u8b77\u8a2d\u5b9a<\/h2>\n  <p>\u5728\u5b98\u65b9\u6838\u5fc3\u5b89\u5168\u6027\u66f4\u65b0\u5168\u9762\u90e8\u7f72\u5b8c\u6210\u524d\u7684\u7a7a\u7a97\u671f\uff0c\u5efa\u8b70\u7cfb\u7d71\u7ba1\u7406\u54e1\u63a1\u53d6\u7e31\u6df1\u9632\u79a6\u7b56\u7565\uff0c\u900f\u904e\u7db2\u8def\u5c64\u9632\u706b\u7246\u898f\u5247\u4f86\u6514\u622a\u60e1\u610f\u7279\u5fb5\u5c01\u5305\u3002<\/p>\n\n  <p>\u82e5\u60a8\u7684\u908a\u754c\u8def\u7531\u5668\u6216\u9632\u706b\u7246\u63a1\u7528 Mikrotik\uff0c\u53ef\u900f\u904e\u4ee5\u4e0b\u547d\u4ee4\u5728 WAN \u4ecb\u9762\u52a0\u5165\u9810\u5148\u8def\u7531 RAW \u898f\u5247\u4f86\u963b\u65b7\u7570\u5e38\u5e36\u6709\u9078\u9805\u7684 IPv4 TCP \u5c01\u5305\uff1a<\/p>\n\n  <div class=\"in-terminal-box\">\n    <div class=\"in-terminal-header\">\n      <span>Mikrotik Firewall RAW \u7de9\u89e3\u6307\u4ee4<\/span>\n      <div class=\"in-terminal-dots\">\n        <span class=\"in-dot in-dot-red\"><\/span>\n        <span class=\"in-dot in-dot-yellow\"><\/span>\n        <span class=\"in-dot in-dot-green\"><\/span>\n      <\/div>\n    <\/div>\n    <pre class=\"in-code\">\/ip firewall raw\nadd chain=prerouting in-interface-list=WAN protocol=tcp ipv4-options=any action=drop comment=\"Mitigation CVE-2026-98432\"<\/pre>\n  <\/div>\n\n  <div class=\"in-callout-info\">\n    <strong>\u9632\u79a6\u5efa\u8b70\uff1a<\/strong> \u5efa\u8b70\u540c\u6b65\u914d\u5408\u5165\u4fb5\u9632\u79a6\u7cfb\u7d71\uff08\u5982 Suricata\uff09\u66f4\u65b0\u5c0d\u61c9\u7279\u5fb5\u78bc\uff0c\u76e3\u63a7\u4e26\u963b\u65b7\u975e\u5178\u578b TCP \u6a19\u982d\u9078\u9805\u7684\u9023\u7dda\u5617\u8a66\uff0c\u78ba\u4fdd\u96f2\u7aef\u8207\u4f01\u696d\u5167\u90e8\u57fa\u790e\u8a2d\u65bd\u5b89\u5168\u3002\n  <\/div>\n\n  <div class=\"in-article-footer\">\n    <p><strong>\u53c3\u8003\u4f86\u6e90\u8207\u5ef6\u4f38\u95b1\u8b80\uff1a<\/strong> <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2026-98432\" target=\"_blank\" rel=\"noopener\">NVD &#8211; CVE-2026-98432 \u8a73\u7d30\u8cc7\u8a0a\u9801\u9762<\/a><\/p>\n  <\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>\u91dd\u5c0d Linux \u6838\u5fc3 TCP \u5b50\u7cfb\u7d71\u8fd1\u671f\u7206\u767c\u7684\u6975\u9ad8\u5371\u96aa\u6f0f\u6d1e CVE-2026-98432\uff08CVSS \u8a55\u5206\u9ad8\u9054 9.8\uff09\uff0c\u672c\u6587\u70ba\u7cfb\u7d71\u7ba1\u7406\u54e1\u8207\u96f2\u7aef\u7dad\u904b\u5718\u968a\u63d0\u4f9b\u5b8c\u6574\u7684\u6f0f\u6d1e\u89e3\u6790\u3001\u5f71\u97ff\u7bc4\u570d\u8a55\u4f30\u53ca\u7dca\u6025\u9632\u8b77\u5c0d\u7b56\u3002\u7531\u65bc\u4e3b\u6d41\u767c\u884c\u7248\u5b98\u65b9\u4fee\u88dc\u7a0b\u5f0f\u767c\u5e03\u5b58\u5728\u6642\u9593\u5dee\uff0c\u638c\u63e1\u5373\u6642\u61c9\u8b8a\u8207\u4e3b\u52d5\u9632\u79a6\u6210\u70ba\u5b88\u8b77\u57fa\u790e\u8a2d\u65bd\u7684\u95dc\u9375\u3002 Linux \u6838\u5fc3\u5b89\u5168 CVSS 9.8 CVE-2026-98432 \u8cc7\u5b89\u9632\u8b77 \u6587\u7ae0\u76ee\u9304 1. \u6f0f\u6d1e\u6982\u8ff0\u8207\u8a55\u5206\u7d30\u7bc0 (CVE-2026-98432) 2. \u5f71\u97ff\u7bc4\u570d\u8207\u767c\u884c\u7248\u72c0\u614b 3. \u653b\u64ca\u6a5f\u5236\u8207\u5a01\u8105\u5206\u6790 4. \u7dca\u6025\u7de9\u89e3\u8207\u9632\u706b\u7246\u9632\u8b77\u8a2d\u5b9a 1\u6f0f\u6d1e\u6982\u8ff0\u8207\u8a55\u5206\u7d30\u7bc0 (CVE-2026-98432) CVE-2026-98432 \u662f\u5b58\u5728\u65bc Linux \u6838\u5fc3 IPv4 TCP \u9023\u7dda\u5efa\u7acb\u7a0b\u5f0f\u78bc\u4e2d\u7684\u4e00\u9805\u56b4\u91cd\u7af6\u614b\u689d\u4ef6\uff08Race Condition\uff09\u8207\u8a18\u61b6\u9ad4\u91cb\u653e\u5f8c\u91cd\u7528\uff08Use-After-Free, UAF\uff09\u6f0f\u6d1e\u3002\u8a72\u6f0f\u6d1e\u5728\u570b\u5bb6\u6f0f\u6d1e\u8cc7\u6599\u5eab\uff08NVD\uff09\u4e2d\u7372\u5f97\u4e86 9.8 \u7684\u6975\u9ad8 CVSS \u8a55\u5206\u3002 \u6700\u9ad8\u8b66\u6212\u8b66\u544a\uff1a \u6b64\u6f0f\u6d1e\u5177\u5099\u300c\u7db2\u8def\u653b\u64ca\u5411\u91cf\uff08Network Attack Vector\uff09\u300d\u3001\u300c\u4f4e\u653b\u64ca\u8907\u96dc\u5ea6\u300d\uff0c\u4e14\u4e0d\u9700\u8981\u4efb\u4f55\u8eab\u5206\u9a57\u8b49\u6216\u4f7f\u7528\u8005\u4e92\u52d5\u3002\u653b\u64ca\u8005\u53ef\u900f\u904e\u7db2\u969b\u7db2\u8def\u76f4\u63a5\u9060\u7aef\u767c\u52d5\u653b\u64ca\uff0c\u53d6\u5f97\u53d7\u5bb3\u4f3a\u670d\u5668\u7684 Root \u5c64\u7d1a\u63a7\u5236\u6b0a\u3002 2\u5f71\u97ff\u7bc4\u570d\u8207\u767c\u884c\u7248\u72c0\u614b \u8a72\u6f0f\u6d1e\u5f71\u97ff\u81ea Linux 4.4 \u7248\u672c\u4ee5\u4f86\u7684\u5927\u591a\u6578\u4e3b\u6d41\u6838\u5fc3\u67b6\u69cb\u3002\u7531\u65bc\u6f0f\u6d1e\u7d30\u7bc0\u516c\u958b\u8207\u90e8\u5206\u4f01\u696d\u7d1a\u4f5c\u696d\u7cfb\u7d71\u4fee\u88dc\u91cb\u51fa\u5b58\u5728\u6642\u9593\u5dee\uff0c\u7dad\u904b\u5718\u968a\u5fc5\u9808\u76e4\u9ede\u7576\u524d\u904b\u4f5c\u74b0\u5883\u3002 \u4f5c\u696d\u7cfb\u7d71 \/ \u767c\u884c\u7248 \u53d7\u5f71\u97ff\u7248\u672c\u7bc4\u570d \u4fee\u88dc\u72c0\u614b [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"wpai_generated_summary":"","wpai_meta_description":"","footnotes":""},"class_list":["post-14174","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/infernews.com\/blog\/wp-json\/wp\/v2\/pages\/14174","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infernews.com\/blog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/infernews.com\/blog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/infernews.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/infernews.com\/blog\/wp-json\/wp\/v2\/comments?post=14174"}],"version-history":[{"count":3,"href":"https:\/\/infernews.com\/blog\/wp-json\/wp\/v2\/pages\/14174\/revisions"}],"predecessor-version":[{"id":14182,"href":"https:\/\/infernews.com\/blog\/wp-json\/wp\/v2\/pages\/14174\/revisions\/14182"}],"wp:attachment":[{"href":"https:\/\/infernews.com\/blog\/wp-json\/wp\/v2\/media?parent=14174"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}