CVE-2026-98432 is a Linux IPv4 TCP use-after-free whose severity is disputed, rated 9.8 versus 5.9. The report covers lab evidence of MPTCP remote code execution, exposure checks, patches, and guidance for safe validation.