# Disclosed, Not Yet Exploited

The disclosure timeline is clean: researcher Xinyang Ge reported the flaw, Eric Dumazet authored the fix on October 1, and the kernel team published the CVE on October 15. As of November 1 there is no verified in-the-wild exploitation and the flaw is not in CISA’s KEV catalog — disclosed, patchable, but not yet weaponized in public.

## Key facts

- Researcher Xinyang Ge reported the flaw to the kernel team.
- Eric Dumazet wrote the fix on October 1.
- The kernel team published CVE-2026-98432 on October 15.
- As of November 1, there was no confirmed exploitation in the wild.
- As of November 1, the CVE had not been added to CISA KEV.

Part of the CVE-2026-98432: the kernel flaw a research model exploited — cve 2026 98432 triage guide collection at https://aiservicesmarket.lol/cve-2026-98432/