Comment Comment by jakobdabo > the attacker chained in a second exploit: a Linux kernel vulnerability in the XFRM ESP-in-TCP subsystemLinux seems to have a huge attack surface that doesn't necessarily need to be there for every user/server.E.g. this came out today: CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation [1].I just disabled mptcp on my systems since I don't use it. Why was it enabled by default?Can I disable this XFRM thing too?[1] https://www.penligent.ai/hackinglabs/cve-2026-98432/ parent jakobdabo 3 days ago
Linux seems to have a huge attack surface that doesn't necessarily need to be there for every user/server.
E.g. this came out today: CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation [1].
I just disabled mptcp on my systems since I don't use it. Why was it enabled by default?
Can I disable this XFRM thing too?
[1] https://www.penligent.ai/hackinglabs/cve-2026-98432/