alert tcp-pkt $EXTERNAL_NET any -> $HOME_NET any (msg:"ET HUNTING TCP SYN with IPv4 Timestamp Option"; reference:cve,2026-98432; reference:url,www.akamai.com/blog/security-research/cve-2026-98432-remote-uaf-linux-kernels-tcp-stack; classtype:attempted-admin; sid:2072640; rev:1; metadata:affected_product Linux, created_at 2026_11_05, deployment Perimeter, deployment Internal, performance_impact Significant, confidence Medium, signature_severity Major, updated_at 2026_11_06;)