CVE-2026-98432: Critical Linux IPv4 TCP Vulnerability Affecting MikroTik RouterOS 7
CVE-2026-98432 is a critical Linux kernel use-after-free vulnerability in the IPv4 TCP connection-handling path. This post explains the technical cause, potential impact, affected Linux kernel and MikroTik RouterOS versions, and why internet-exposed TCP services on routers deserve immediate review. It also provides practical RouterOS upgrade and firewall-hardening guidance to reduce exposure.