Hacker News new | past | comments | ask | show | jobs | submit
Aachen | on: TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
https://en.wikipedia.org/wiki/Express_Data_Path for anyone else wondering what that is
tptacek | parent
tl;dr: eBPF programs that run hot off the DMA buffers, before skbufs are created, that can XDP_DROP packets.
loading story #50322933