9.8 kernel bug. Spark owners should check their kernels.
CVE-2026-98432 sits in the Linux IPv4 TCP handshake. It's remote, with no login needed.
Per this thread, turning off MPTCP isn't enough, and the Spark's kernel has no fix yet
Thanks for the heads up
@plotarmordev