# Umbiko we-Jepsen we-ParticleDB, i-USB stick yeminwe ye-Lenovo, i-HackerTube ka-Karpathy kanye ne-Linux TCP bug CVE-2026-98432: izindaba ezine zabathuthukisi ku-Daily Diff eyodwa

Published: 2026-11-02

Izindaba ezine zabathuthukisi, ngayinye ibangelwa umthombo wayo. Ukuhlaziya kuka-Jepsen kwedathabhesi ye-ParticleDB kutholwe izinkinga ezingama-96, okuhlanganisa nokulahleka kokubhaliwe okuqinisekisiwe kumodi yokuthengiselana ezenzakalelayo yokukhishwa kokugcina okuhlolwe, futhi kuncoma ukuyeka ukuthunyelwa; ukuhlolwa kwaxhaswa yi-Orkes, ethi ukukhishwa kwayo okulandelayo kulungisa konke. I-USB stick yeminwe ye-Lenovo ThinkPlus FU100 ethengiswa njengebethelwe nge-AES-256 ibine-SD khadi evamile engenalutho olubethelwe, ngokusho komcwaningi u-Xusheng Li njengoba kubikwe yi-Tom's Hardware. U-Andrej Karpathy wakha i-HackerTube, isayithi lamavidiyo e-YouTube angu-6,454 anconyiwe kumazwana e-Hacker News, cishe emahoreni amabili. Futhi i-kernel ye-Linux i-CVE-2026-98432, i-IPv4 TCP use-after-free ephumelele u-9.8, idinga i-kernel elungisiwe nokuvula kabusha. Isinqumo yi-REVERT.

Canonical: https://thedailydiff.dev/zu/video/2026-11-01-particledb-lenovo-tcp-hackertube/

## Lokho okuhlanganiswa yile vidiyo

- U-Jepsen, ilabhorathri yokuhlola idathabhesi ephethwe u-Kyle Kingsbury, washicilela ukuhlaziya kwayo kwe-ParticleDB ngo-Okthoba 31, 2026. I-ParticleDB iyidathabhesi ye-Rust evela e-Orkes ehlose ama-AI agents; i-Orkes yaxhasa umsebenzi. U-Jepsen uhlole izinguqulo 1.1.4 kuya ku-1.1.18.11.rc-22 ku-node eyodwa futhi ethula izinkinga ezingama-96, iningi lazo elidinga iseva eyodwa, iklayenti elilodwa futhi akukho amaphutha. Izibonelo embikweni: i-WHERE 4 = 5 clause ibuyise imigqa enesihluthulelo esiyinhloko esingu-5, i-WHERE TRUE ayihambisananga nalutho, futhi i-UPDATE ingashiya imigqa eminingi enesihluthulelo esifanayo esiyinhloko.
- Ikhasi lasekhaya le-ParticleDB lakhangisa 'I-ACID Egcwele. I-159K TPS.' kanye nobufakazi be-TLA+, kodwa u-Jepsen uthi akukho ukucaciswa kwe-TLA+ okwakutholakala ngesikhathi sokusebenzisana, futhi umbhalo ongaphansi kokuthi 'I-ACID Egcwele' uthi ukuhlukaniswa kwesithombe. Ku-1.1.18.11.rc-22, inguqulo yokugcina u-Jepsen ayihlolile, imodi yokuthengiselana ezenzakalelayo ye-occ isalahlekelwe ukubhaliwe okuqinisekisiwe ngesikhathi sokusebenza okuvamile, futhi imodi eqine kakhulu ebekezekayo yavumela i-Lost Update ngemuva kokubulawa kwezinqubo. I-Orkes ithi inguqulo 1.1.19-rc.13 ixazulula zonke izinkinga ezisele; u-Jepsen akayihlolanga futhi uncoma ukuthi abasebenzisi bayeke ukuthunyelwa okuqhubekayo kwe-ParticleDB futhi bathuthele kwamanye ama-database.
- Umcwaningi wezokuphepha u-Xusheng Li uthole ukuthi i-USB stick yeminwe ye-Lenovo ThinkPlus FU100, eyakhangiswa njengebethelwe nge-AES-256, iqukethe i-SD khadi engenalutho olubethelwe; umfundi weminwe ushintshe kuphela uxhumano lwe-USB. Wakubika ngo-Agasti 2, 2025, futhi ukulungiswa kokuqala kwe-Lenovo kwaba ungqimba lwe-epoxy phezu kwe-SD khadi. I-Lenovo iklelise iseluleko sayo phezulu, futhi ukulungiswa kamuva kwe-FU100 kanye nama-drives ahlobene kudinga ukushayela ucingo emgqeni wesevisi e-China, bese kuba ukushintshwa noma ukuthuthukiswa kwe-firmware esizeni, ngokusho kwe-Tom's Hardware.
- Ekususeni okulandelayo okubikwe yi-Tom's Hardware, u-Li usebenzise i-Codex ye-OpenAI ngethuluzi lokuhlehlisa ubunjiniyela lomqashi wakhe ngokumelene nesofthiwe yokuvikela ye-USB yabanye abenzi; i-Netac ithathe cishe imizuzu eyisikhombisa ngoba inesihluthulelo esilungisiwe esakhiwe ngaphakathi futhi yabhalela iphasiwedi kumalogi okuxilonga, futhi i-drive yomunye umthengisi inama-akhawunti amabili afihliwe u-Li abiza ngokuthi ama-backdoors. Ukuze uthole idatha ku-USB stick, bethela amafayela ngesofthiwe oyilawulayo ngaphambi kokuba afinyelele kudivayisi.
- Ngo-Okthoba 31, 2026 u-Andrej Karpathy wachaza i-HackerTube, isayithi lesitayela se-YouTube ku-hackertube.org eyakhiwe nge-coding agent yakhe cishe emahoreni amabili. I-agent yalayisha amazwana e-Hacker News, yahlunga ugaxekile futhi yagcina cishe angama-40,000 ancoma ividiyo ye-YouTube, okukhiqize amavidiyo angu-6,454 kusukela ngo-2007 kuya ku-2026 ezihloko ezingu-150. Isayithi libonisa ifreyimu eku-50% endaweni ye-thumbnail elayishiwe. U-Karpathy ubala izinyathelo zakhe eziyinhloli njengesihluthulelo se-Google Cloud API, iseva kanye nesizinda.
- I-CVE-2026-98432 iyi-use-after-free ku-handshake ye-IPv4 TCP ye-kernel ye-Linux, ephumelele i-CVSS 9.8, efinyeleleka yi-peer ekude ngaphandle kokungena ngemvume. Ukulungiswa kuka-Eric Dumazet kuthathele indawo izingcingo ezimbili ze-kfree ngezwi le-kfree\_rcu ekuzibophezelweni okungosuku luka-Okthoba 1; ama-kernels azinzile ngokulungiswa athunyelwa ngo-Okthoba 11 nango-15, futhi le bug ibuyela ku-Linux 4.4. I-Red Hat ikhuphule ukukala kwayo kusuka ku-Important kuya ku-Critical ngo-Okthoba 30. I-Ubuntu ne-Red Hat Enterprise Linux abazange babhale i-kernel elungisiwe ngoMgqibelo kusihlwa, ngo-Okthoba 31. Faka i-kernel elungisiwe yokusabalalisa kwakho bese uqala kabusha, kuhlanganise nama-container hosts, ngoba ama-container ahlanganyela i-kernel ye-host.
- I-Anthropic ithi i-Claude yabhalela ukuhlasela okusebenzayo kwamaseva e-Linux ngesilaleli se-multipath TCP, nokuthi ebufakazini bayo bokucabanga kuthatha imizuzu engama-48 ukukhipha inkomba ye-kernel neminye imizuzu emihlanu yokusebenzisa umyalo we-shell; ukuhlasela akushicilelwe. Ithimba lezokuphepha le-Go libona ukuthi izinhlelo ze-Go zenza abalaleli be-multipath TCP basebenze ngokuzenzakalelayo kusukela ku-Go 1.24 futhi liyaxwayisa ukuthi amasistimu angenaso lesi silaleli angaba sengozini yokuhlaselwa okufanayo. I-Red Hat ne-AlmaLinux zishicilela umthetho we-firewall olahla amaphakethe e-IPv4 TCP anezinketho ze-IP, okuthi i-Red Hat ithi kunciphisa ukuchayeka futhi akukuvimbeli ngokuphelele ukuhlaselwa.

## Imibuzo nezimpendulo

### Yini u-Jepsen ayithola kudathabhesi ye-ParticleDB, futhi yini ayincomayo?

Ukuhlaziya kuka-Jepsen kwe-ParticleDB, okushicilelwe ngo-Okthoba 31, 2026 futhi kwaxhaswa yi-Orkes, kuthula izinkinga ezingama-96 kuzinguqulo 1.1.4 kuya ku-1.1.18.11.rc-22, okuhlanganisa ne-WHERE 4 = 5 ebuyisa imigqa. Enguqulweni yokugcina ehloliwe, imodi yokuthengiselana ezenzakalelayo isalahlekelwe ukubhaliwe okuqinisekisiwe ngesikhathi sokusebenza okuvamile. U-Jepsen uncoma ukuthi abasebenzisi bayeke ukuthunyelwa okuqhubekayo kwe-ParticleDB futhi bathuthele kwamanye ama-database.

### Ingabe i-USB stick yeminwe ye-Lenovo ThinkPlus FU100 yayibethelwe ngempela nge-AES-256?

Ngokusho komcwaningi u-Xusheng Li, njengoba kubikwe yi-Tom's Hardware kanye ne-HackingPassion, i-FU100 yakhangiswa njengebethelwe nge-AES-256 kodwa yayiqukethe i-SD khadi engenalutho olubethelwe. Umfundi weminwe ushintshe kuphela uxhumano lwe-USB. Ukulungiswa kokuqala kwe-Lenovo kwaba i-epoxy phezu kwekhadi, futhi ukulungiswa kamuva kudinga ukushayela ucingo emgqeni wesevisi e-China ukuze kushintshwe noma kuthuthukiswe i-firmware esizeni.

### Yini i-HackerTube futhi u-Andrej Karpathy wayakha kanjani?

I-HackerTube ku-hackertube.org yisayithi lesitayela se-YouTube samavidiyo angu-6,454 anconyiwe kumazwana e-Hacker News kusukela ngo-2007 kuya ku-2026, ezihloko ezingu-150. Okuthunyelwe kuka-Karpathy kuthu i-coding agent yakhe yalayisha amazwana, yahlunga ugaxekile futhi yagcina cishe angu-40,000 ancoma ividiyo, nokuthi ukwakhiwa kuthatha cishe amahora amabili. Izinyathelo zakhe eziyinhloli kwakuyisihluthulelo se-Google Cloud API, iseva kanye nesizinda.

### Ngiwulungisa kanjani u-CVE-2026-98432 we-kernel ye-Linux, futhi yikuphi ukusabalalisa okune-kernel elungisiwe?

Faka i-kernel elungisiwe yokusabalalisa kwakho bese uqala kabusha, kuhlanganise nama-container hosts nama-Kubernetes nodes, ngoba ama-container ahlanganyela i-kernel ye-host. Iphutha iyi-IPv4 TCP use-after-free ephumelele i-CVSS 9.8, elungiswe phezulu kuma-kernels azinzile ngo-Okthoba 11 nango-15. Ngokusho kwe-Atlas ngo-Okthoba 31, i-Debian, i-SUSE ne-Amazon Linux zazinokulungiswa, kuyilapho i-Ubuntu ne-Red Hat Enterprise Linux zingazange zibe nazo; i-Red Hat ishicilela ukunciphisa kwe-firewall okunciphisa ukuchayeka.

### Sasiyini isinqumo se-Daily Diff ngalezi zindaba ezine?

Isinqumo se-Daily Diff kwakuyi-REVERT. Iseluleko sika-Jepsen nge-ParticleDB simisa ukuthunyelwa okuqhubekayo nokuthuthela kwenye idathabhesi, futhi i-bug ye-kernel ye-Linux CVE-2026-98432 idinga i-kernel elungisiwe nokuvula kabusha, ngobufakazi bokucabanga be-Anthropic obuthatha imizuzu engama-48 ukukhipha inkomba ye-kernel neminye emihlanu yokusebenzisa umyalo we-shell.

## Izahluko

- 0:00 Ukuvula okubandayo: i-where clause isho kanjani okune kulingana nokuhlanu?
- 0:44 Indaba yokuqala: yini u-Jepsen ayithola ku-ParticleDB?
- 2:17 Indaba yesibili: kwakuyini ngaphakathi kwe-USB stick yeminwe ye-Lenovo?
- 3:31 Indaba yesithathu: yini u-Karpathy ayakhile ngesikhathi esisodwa ekuseni?
- 4:22 Indaba yesine: yini oyilungisa nge-CVE-2026-98432?
- 5:43 Emuva esitobhwashi: kwathatha isikhathi esingakanani ukuhlasela?
- 6:02 Isinqumo: BUYISA

## Umbhalo obhaliwe ohunyushwe

Kuhunyushwe kusuka ekulandiseni kokuqala kwesiNgisi. Umsindo namazwibela atholakalayo alawulwa yi-YouTube.

### Ukuvula okubandayo: i-where clause isho kanjani okune kulingana nokuhlanu?

0:00 Idathabhesi ekhangisa nge-Full ACID kufanele igcine lokho okubhalayo. U-Jepsen uhlole eyodwa wathola izinkinga ezingamashumi ayisishiyagalolunye nesithupha, kuhlanganise ne-where clause ethi okune kulingana nokuhlanu futhi isabuyisa imigqa. Kule vidiyo, izindaba ezine. Yini u-Jepsen ayithola ku-database ebibanga i-Full ACID? Kwakuyini ngaphakathi kwe-USB stick yeminwe ethengiswa njengebethelwe? Yini u-Andrej Karpathy ayakhile ngesikhathi esisodwa ekuseni? Futhi yini oyilungisa nge-bug yenethiwekhi ye-Linux?

0:26 Enye yalezo zibuni iza nesitobhwashi. Ngizokufundela ekugcineni. KungumSombuluko, Novemba wokuqala, futhi lokhu yi-Daily Diff. I-Jepsen ilabhorathri yokuhlola ka-Kyle Kingsbury. Isebenzisa idathabhesi ngemizila yokusebenza yangempela kanye nokwehluleka bese ihlola ukuthi iziqinisekiso ezisekuwebhusayithi ziyagcina yini. Cabanga ngomhloli ovula ifriji ngempela.

### Indaba yokuqala: yini u-Jepsen ayithola ku-ParticleDB?

0:44 Indaba yokuqala. NgoMgqibelo u-Jepsen washicilela umbiko wakhe nge-ParticleDB, idathabhesi ye-Rust evela e-Orkes ehlose ama-AI agents. I-Orkes yakhokhela umsebenzi. Ikhasi lasekhaya lathi i-Full ACID, izinkulungwane eziyikhulu namashumi amahlanu nesishiyagalolunye zokuthengiselana ngomzuzwana. U-Jepsen uhlole i-ParticleDB kusukela ekwakhiweni kwayo kokuqala kwephuzu elilodwa kuya ekukhishwe kwesibili kwe-release candidate. Isayithi yayibiza ngokuthi ibufakazi obusemthethweni, ngobufakazi be-TLA plus. U-Jepsen uthi akukho ukucaciswa kwe-TLA plus okwakutholakala ngesikhathi somsebenzi.

1:10 Ngaphansi komugqa we-Full ACID, ikhasi elifanayo lathi ukuhlukaniswa kwesithombe, okungahlukanisiwe ngokuphelele. Izibuni zazingazweli. Iningi lidinga iseva eyodwa, iklayenti elilodwa futhi akukho ukwehluleka okufakwe. I-where clause ethi okune kulingana nokuhlanu ibuyise imigqa. I-where clause ethi iqiniso ayihambisananga nalutho. Izibuyekezo zishiye imigqa emibili enesihluthulelo esifanayo esiyinhloko. Ukukhishwa kokugcina u-Jepsen akuhlolile, i-release candidate amashumi amabili nambili,

1:36 kwakuphephe kakhulu. Naphezu kwalokho, imodi yokuthengiselana ezenzakalelayo yalahlekelwa ukubhaliwe okuqinisekisiwe ngesikhathi sokusebenza okuvamile. Imodi eqine kakhulu yayisavumela ukulahlekelwa yizibuyekezo ngemuva kokubulawa kwenqubo. I-Orkes ithi ukukhishwa kwayo okulandelayo kulungisa konke lokhu. U-Jepsen akayihlolanga. Ngakho kulokho kukhishwa kokugcina idathabhesi eyathembisa i-Full ACID ingalahlekelwa ukubhala okwakuye kwagunyazwa kakade. Ijubane, ngicabanga, laliheha.

2:00 Iseluleko sika-Jepsen sicacile. Misa ukuthunyelwa okuqhubekayo kwe-ParticleDB bese uthuthele kwelinye i-database ngokushesha okungenzeka. I-Orkes ibeka icala ku-spring refactor futhi ithi amakhasimende ayo, enguqulweni endala, kungenzeka ukuthi awazange athinteke. Imibhalo ye-stored procedure yaze yakhetha ikheli le-imeyili lika-Kyle Kingsbury. Indaba yesibili. I-Lenovo ThinkPlus FU eyikhulu iyi-USB stick yeminwe

### Indaba yesibili: kwakuyini ngaphakathi kwe-USB stick yeminwe ye-Lenovo?

2:21 emakethwa njengebethelwe nge-AES amakhulu amabili namashumi amahlanu nesithupha. Umcwaningi wezokuphepha u-Xusheng Li wahlukanisa eyodwa wathola i-SD khadi evamile, engenalutho olubethelwe kuyo. Umfundi weminwe unqume into eyodwa, ukuthi i-stick ixhunywe kukhompyutha yini. Amafayela kukhadi awazange ancike kuyo. U-Li ubike iphutha ku-Lenovo ngo-Agasti amashumi amabili namashumi amabili nanhlanu. Ukulungiswa kokuqala kwaba ungqimba lwe-epoxy phezu kwe-SD khadi. Ngakho amafayela awazange abethelwe.

2:47 Linda, yi-SD khadi nje? Njalo bekulokhu kunjalo. I-Lenovo iklelise iseluleko sayo phezulu. Ukulungiswa kamuva, kwe-FU eyikhulu nama-drives amathathu ahlobene, kusho ukushayela ucingo emgqeni wesevisi e-China, bese kuba ukuthumela i-drive emuva noma ukuthola ukuthuthukiswa kwe-firmware esizeni. I-Lenovo iyakweluleka ukusula i-drive kuqala. Ngesonto eledlule u-Li waqondisa i-Codex ye-OpenAI, kanye nethuluzi lokuhlehlisa ubunjiniyela lomqashi wakhe,

3:09 kusofthiwe yokuvikela ye-USB yabanye abenzi. Enye ye-Netac yathatha cishe imizuzu eyisikhombisa, ngoba inesihluthulelo esilungisiwe esakhiwe ngaphakathi futhi yabhalela iphasiwedi kumalogi okuxilonga. Enye i-drive inama-akhawunti amabili afihliwe u-Li abiza ngokuthi ama-backdoors. Uma ukuphepha kwe-drive kuyihardware, zihlole wena. Bethela amafayela ngesofthiwe oyilawulayo ngaphambi kokuba afinyelele ku-stick, futhi uphathe iminwe njengokungaba lula.

### Indaba yesithathu: yini u-Karpathy ayakhile ngesikhathi esisodwa ekuseni?

3:31 Indaba yesithathu, elula. NgoLwesihlanu kusihlwa u-Andrej Karpathy wavula i-YouTube, wabona lokho akubiza ngokuthi udonga olunentshontsho, futhi ngoMgqibelo ekuseni watshela i-coding agent yakhe ukuthi yakhe okungcono kunoma yini i-Hacker News eyincomayo. I-agent yalayisha amazwana e-Hacker News, yahlunga ugaxekile, futhi yagcina cishe izinkulungwane ezingamashumi amane ezincoma ividiyo ye-YouTube. Lokho kwashiya amavidiyo ayizinkulungwane eziyisithupha namakhulu amane namashumi amahlanu nane, kusukela ngo-amashumi amabili nesikhombisa kuze kube manje, ezihloko eziyikhulu namashumi amahlanu.

3:58 Isayithi yi-hackertube dot org. Libonisa ifreyimu kusuka ekuphawuleni okuphakathi endaweni ye-thumbnail umalayishi ayikhethile, okubuhlungu kancane. U-Karpathy uthi konke ukwakhiwa kuthathe cishe amahora amabili. Izinyathelo zakhe eziyinhloli kwakuyisihluthulelo se-Google API, iseva kanye nesizinda. Ngo-Okthoba weshumi nambili ngakutshela ukuthi u-Karpathy ucabanga ukuthi ukufinyelela nemisebenzi kudala igebe ekuqondeni kwabantu lezi zinsiza. Amahora amabili omsebenzi ayindawo enhle yedatha.

4:21 Indaba yesine, okufanele wenze ngayo.

### Indaba yesine: yini oyilungisa nge-CVE-2026-98432?

4:23 I-CVE amashumi amabili namashumi amabili nesithupha, ezingamashumi ayisishiyagalolunye nesishiyagalombili ezingamashumi amane nantathu nambili iyi-use-after-free ku-kernel ye-Linux ye-IP v amane i-TCP handshake, ephumelele u-9.8 kuma-10. I-peer ekude engenakho ukungena ngemvume ingayifinyelela. U-Eric Dumazet wabhala ukulungiswa ngo-Okthoba wokuqala. Ukulungiswa kwafinyelela kuma-kernels azinzile ngo-Okthoba weshumi nanye noweshumi nanhlanu, futhi le bug ibuyela ku-Linux wamane nane. I-Red Hat ikhuphule ukukala kwayo kusuka kokubalulekile kuya kokubucayi ngo-Okthoba wamashumi amathathu. NgoMgqibelo kusihlwa, i-Ubuntu ne-Red Hat Enterprise Linux kusenakho okungekho okulungisiwe

4:52 i-kernel. I-Anthropic ithi u-Claude wabhala ukuhlasela okusebenzayo kwamaseva anesilaleli se-multipath TCP, futhi izinhlelo ze-Go zavula lezo ngokuzenzakalelayo kusukela ku-Go eyodwa iphuzu lamashumi amabili nane. Ithimba le-Go liyaxwayisa ukuthi amasistimu angenaso lesi silaleli angaba sengozini yokuhlaselwa okufanayo, futhi lithi ukulungiswa okungcono kakhulu yi-kernel elungisiwe. Uma ukusabalalisa kwakho kungenayo i-kernel elungisiwe okwamanje, i-Red Hat ne-AlmaLinux zishicilela umthetho we-firewall olahla amaphakethe e-IP v amane e-TCP aphethe izinketho ze-IP. I-Red Hat ithi kunciphisa ukuchayeka futhi ayikwazi ukukuvimbela ngokugcwele.

5:23 Ngemuva kwalokho, ulinda. Yini okufanele uyenze namuhla. Faka i-kernel elungisiwe yokusabalalisa kwakho bese uqala kabusha, kuma-container hosts naku ama-Kubernetes nodes nawo, ngoba ama-container ahlanganyela i-kernel ye-host. I-Debian, i-Suse ne-Amazon Linux sezinokulungiswa. Uma ungakakwazi ukulungisa okwamanje, qala ngama-hosts asebenzisa abalaleli be-multipath TCP. Manje isitobhwashi engasithembisile.

### Emuva esitobhwashi: kwathatha isikhathi esingakanani ukuhlasela?

5:44 Ebufakazini bokucabanga be-Anthropic, kuthatha imizuzu engamashumi amane nesishiyagalombili ukukhipha inkomba ye-kernel, bese kuba eminye imizuzu emihlanu yokusebenzisa umyalo we-shell. I-Anthropic ayikashicileli ukuhlasela. Uma uthanda ukufunda lokhu kunokungizwa ngikusho, i-diff ifika ebhokisini lakho le-imeyili njalo ekuseni, mahhala ku-the daily diff dot dev, isixhumanisi esingezansi.

### Isinqumo: BUYISA

6:02 Ngakho isinqumo sanamuhla yi-REVERT. Ngingabuyisa i-ParticleDB, ngoba iseluleko sika-Jepsen simisa ukuthunyelwa, futhi ngingalungisa leyo kernel, ngoba iza nesitobhwashi. Futhi lokho kuyi-diff yanamuhla. Ngingu-Niko ovela e-Axrisi. Hlanganisa ngokuzibophezela.

## Imithombo

- [Jepsen: ParticleDB 1.1.4 (Kyle Kingsbury, October 31, 2026)](https://jepsen.io/analyses/particledb-1.1.4) — Jepsen
- [Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy case](https://www.tomshardware.com/tech-industry/cyber-security/lenovo-fingerprint-usb-stick-sold-as-aes-256-encrypted-had-a-plain-sd-card-inside-ai-assisted-follow-up-finds-a-backdoor-and-hardcoded-keys-in-other-secure-usb-products) — Tom's Hardware
- [Lenovo ThinkPlus Fingerprint USB Drive Sold as Encrypted Was a Plain SD Card Inside](https://hackingpassion.com/lenovo-thinkplus-encrypted-usb-sd-card/) — HackingPassion
- [HackerTube](https://karpathy.bearblog.dev/hacker-tube/) — Andrej Karpathy
- [CVE-2026-98432](https://ubuntu.com/security/CVE-2026-98432) — Ubuntu Security
- [RHSB-2026-016: Use-after-free - kernel IPv4 (CVE-2026-98432)](https://access.redhat.com/security/vulnerabilities/RHSB-2026-016) — Red Hat
- [ipv4: free inet\_opt and ireq\_opt after an RCU grace period](https://github.com/torvalds/linux/commit/e3f33b0a1d89d738e2b913dab519226eaf76e15b) — Linux kernel (Eric Dumazet)
- [Discovering and exploiting vulnerabilities in critical, real-world software with Claude](https://www.anthropic.com/research/discovering-vulnerabilities-with-claude) — Anthropic
- [Protecting against CVE-2026-98432 when using Go programs](https://www.openwall.com/lists/oss-security/2026/10/30/1) — Go Security Team via oss-security
- [Linux's October 2026 TCP Use-After-Free: CVE-2026-98432](https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf) — Atlas