Linux Kernel TCP Vulnerability Requires Action for Self-Managed Instances

CVE-2026-98432 is a nasty use-after-free bug in the Linux kernel's IPv4 TCP handshake that could lead to remote code execution on versions 4.4+. If you're running self-managed Amazon Linux 2 or 2023 instances, you'll need to update your kernel packages and reboot—no way around it. AWS is handling updates for managed services automatically, so those users can relax. Check the full bulletin for per-service details and patch availability.