Security
Go to Okta.com ↗
‹ Back to blog

Linux Kernel TCP Flaw (CVE-2026-98432)

Okta

What happened?

On October 25, 2026, the National Vulnerability Database published CVE-2026-98432, a vulnerability in the Linux kernel's IPv4 TCP stack. The flaw is a use-after-free: when a server handles a retransmitted SYN for a connection request, it can read IP options from memory that has already been freed. This can lead to a crash or memory corruption. The Linux kernel fix defers freeing these IP options until after an RCU (read-copy-update) grace period, so no thread can still be using them when they are released.

Okta's response

  • Security Patching: All Okta and Auth0 environments are fully patched or mitigated against this issue.

  • No Evidence of Exploitation: To date, Okta and Auth0 have observed no evidence of exploitation.

Do I need to do anything?

  • For customers running Okta Access Gateway (OAG), we recommend upgrading to the latest version and restarting your appliance to ensure the patched kernel is loaded.

Okta