# IPFire 2.29 Core Update 205 patches CVE-2026-98432 Linux TCP use-after-free

> **Key takeaway:** IPFire shipped an emergency single-package kernel update to 6.18.60 to fix a serious use-after-free vulnerability in the Linux TCP stack that affects its core firewall functionality.

**Published:** 2026-11-03T12:21:22+00:00 
**Source:** Linuxiac 
**Category:** distro-news 
**Canonical URL:** https://fosswire.org/news/ipfire-229-core-update-205-patches-cve-2026-98432-linux-tcp-.html 

## Summary
The IPFire project has released Core Update 205 as an emergency security patch for its Linux-based firewall distribution. This update addresses CVE-2026-98432, a use-after-free vulnerability located in the Linux kernel's TCP stack, which is critical because IPFire depends on that same networking code to inspect and forward traffic. The developers explicitly urged administrators to install the update immediately rather than deferring it to a scheduled maintenance window.

To deliver the fix rapidly, the team stripped Core Update 205 down to a single package: a kernel upgrade to Linux 6.18.60. All previously planned features for this update were moved to Core Update 206, which is already in testing. The kernel bump also resolves a crash in the Broadcom network driver. Because the running kernel is replaced, a system reboot is mandatory before the security fixes become active. Installation is available through IPFire's web interface or the pakfire command-line package manager.

## Kernel and delivery changes in Core Update 205
- **CVE-2026-98432:** A use-after-free flaw in the Linux kernel's TCP stack, the networking subsystem that IPFire relies upon for all packet processing.
- **Kernel version:** Upgrade to Linux 6.18.60 is the sole package in this release, making it unusually small compared to standard IPFire updates.
- **Broadcom driver fix:** The same kernel resolves a crash affecting Broadcom network hardware, which could cause instability on systems with those NICs.
- **Deployment requirement:** A full system reboot is necessary because the fix requires loading the new kernel; the vulnerability remains exploitable until restart.
- **Release scope reduction:** Planned improvements originally slated for Core Update 205 were deferred to Core Update 206 to accelerate delivery of the security patch.

## Why it matters
Because IPFire is a dedicated firewall distribution, any TCP stack vulnerability is a direct threat to its primary security function rather than a secondary concern. The emergency packaging approach—shipping a single kernel update while deferring feature work—demonstrates how Linux-based security appliances can respond rapidly to upstream kernel flaws. Administrators running IPFire in production must schedule reboots promptly, and the incident highlights the operational trade-offs between rapid security response and planned maintenance windows in critical infrastructure deployments.