Episode 513

Ask Noah Show 513

November 3rd, 2026

53 mins 52 secs

Link with Timestamp

Download MP3 (37.1 MB)

Your Hosts

About this Episode

This week we talk about yet another CVE! A use-after-free vulnerability was found in the Linux kernel's IPv4 networking subsystem. A remote, unauthenticated attacker could exploit a race condition during TCP connection request processing to trigger remote code execution.

-- During The Show --

00:45 CVE 2026-98432

  • Unprecedented ability to find CVEs
  • Last weeks CVE was difficult to exploit
  • CVE Ratings
  • This CVE is worst case
  • "Use After Fee" via network stack
  • Only need to send specially crafted IPv4 traffic
  • Race condition
  • Affects all Linux Kernels
  • Conflicted on self hosting
  • IPv6 publicly accessible
  • Network Address Translation (NAT)
  • Easy to self host beyond one's skill to trouble shoot
  • Red Hat
  • Ubuntu

13:40 Brave Being Sued

  • Several publishers sue Brave
  • Alleged that: Brave provided data to train AI, bypassing paywalls
  • Journalism has to make some decisions
  • Archive.ph
  • Cost vs value
  • Noah wouldn't pick this fight

22:34 News Wire

And the Kali linux team has announed its 2026.03 release

24:24 Red Hat Interview

  • Gunnar Hellekson - Vice President and General Manager
  • RHEL AI vs OpenShift AI
  • How does the community influence RHEL
  • 2023 "flash point" and change in communication
  • Open Source for America
  • Government, Open Source, and AI
  • Biggest barrier to more Open Source in Government
  • Have you seen a move from "check boxes" in audits
  • OpenSCAP
  • Image Mode vs Package Mode
  • Bootc system
  • Guidance around image mode?
  • Does image mode belong in home labs?
  • Year of collaboration

48:18 Google TV Bot Net

  • XCPE Botnet on Google TV devices
  • 1.3 Million devices
  • Google certified boxes got infected
  • Malware was sneaky
  • Devices were from an official Google partner
  • Malware did all kinds of terrible
  • Google is working with multiple governments to mitigate the bot net
  • Devices are still infected
  • LWN.net

-- The Extra Credit Section --

For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!

This Episode's Podcast Dashboard

Phone Systems for Ask Noah provided by Voxtelesys

Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix

-- Stay In Touch --

Find all the resources for this show on the Ask Noah Dashboard

Ask Noah Dashboard

Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!

Altispeed Technologies

Contact Noah

live [at] asknoahshow.com

-- Twitter --

Support Ask Noah Show