๐จ PSA for anyone running a Linux server, node, or relay
CVE-2026-98432 is a critical Linux kernel bug (CVSS 9.8). Someone on the internet can send crafted TCP packets and take over your machine. No login needed.
Ubuntu and Red Hat haven't shipped a fixed kernel yet. Debian, SUSE, Oracle and Amazon have.
What to do today:
1. Check your kernel: uname -r
Fixed versions: 6.1.190+, 6.6.159+, 6.12.113+, 6.18.56+, 7.2.10+ or 7.3+. Below that, you're exposed.
2. If your distro has a fix, update and reboot.
3. If not, block the attack. It needs TCP packets with "IP options," which normal traffic never uses. One nftables rule drops them. Log what gets dropped so you can see if someone's probing you.
4. Turn off MPTCP unless you need it:
sysctl -w net.mptcp.enabled=0
Programs built with Go 1.24+ use MPTCP automatically, and that's how the known exploit gets in.
5. Make it survive a reboot, and check it still works after one.
If you run a Bitcoin node, a Lightning node or a Nostr relay, your machine is on the internet by design. Do this today.
Self-hosting is freedom. Patching is part of the job. ๐ก๏ธ
Login to reply
Replies (26)
Important to note that
sudo sysctl -w net.mptcp.enabled=0
prevents *new* MPTCP sockets from being created, but it does not retroactively convert existing listeners. A restart of any services already using MPTCP is still needed.
use `sudo ss -Mlnp` before and after to make sure you're good ๐ค
Ran the vendor trackers just now so people can see where their distro stands on CVE-2026-98432:
- Debian: fixed. bookworm 6.1.190-1 (DLA-4841-1), trixie 6.12.113-1 (DSA-6568-1), matching your version list.
- Red Hat: RHEL 8, 9 and 10 listed as Affected, no fix yet. They score it 8.1 (attack complexity High, it's a race), not 9.8, and say no mitigation meets their criteria.
- Ubuntu: no CVE page published yet.
- Not on CISA's Known Exploited list as of this morning.
One thing worth knowing: the upstream fix (e3f33b0a, in 7.3-rc7) is in the IPv4 code that frees TCP IP options (inet_opt / ireq_opt), and the advisory names a second path through request-socket migration. So the IP-options drop rule is the step that matches the bug itself, and keeping net.ipv4.tcp_migrate_req at its default 0 closes the other path. Patch and reboot as soon as your distro ships.
CVE-2026-98432
CVE-2026-98432 - Red Hat Customer Portal
CVE Details App
I'm just closing the laptop till there's a fix on Ubuntu...

Oh just a 9.8 on every Linux server. ๐คฃ
The "take over" part was theoretical yesterday or is this the second such kernel bug in 24h?
Thanks for sharing
One thing missing from most guides: Go 1.24+ enables MPTCP by default for all listeners. So your LND, your relay, your watchtower are all MPTCP-enabled unless you explicitly turned it off. The attack surface is larger than just nodes that opted in. Check before assuming you're not affected.
Fuck it, im taking everything offline ๐
I'm gonna run more.
For real. Black Uptober got us.
One more reason to run Debian instead of Ubuntu.
My umbrel node doesn't report listening socket with MPTCP
I executed ss -Mlnp (no results)
Another server with Ubuntu and docker services installed reports just localhost socket with MPTCP
I've been plodding along at making a Nostr powered RSS reader to replace my FreshRSS instance (the last traditional self hosted web service I'm running). I think this, and the million other CVEs in the last week or so, is my sign to migrate away from traditional self hosting.
Thanks Derek.
word



If I had the motivation and was evil, I could just simply take over the world with this vuln?
Updated my node. Thanks.
Thank you
Is StartOS affected by this?
I saw this on my Twitter TL and felt a full circle moment ๐
Thank you for this information. I found out my node had MPTCP enabled and I disabled it.
We are looking for an individual who can lend 185,000 US dollars to our holding company.
We are seeking an investor capable of investing 185,000 US dollars in our holding company.
We will establish an animation film production company using the 185,000 US dollars you will lend to our holding company.
We will establish an animation film production company with the 185,000 US dollars you invest in our holding company.
We will use the 185,000 US dollars you invested in our holding company to establish an animation film production company, and we will have increased that investment amount within a few months.
By using the 185,000 US dollars you invested in our holding company to launch an animation film production company, we will increase the value of your investment within a few months.
We will have increased the 185,000 US dollars you invested in our holding company within a few months.
We will use the 185,000 US dollars you lent to our holding company to establish an animated film production company, and within a few months, we will significantly increase the 185,000 US dollars you lent to our holding company.
Since animated films attract significant public interest today and we intend to undertake international animation projects, the animation film production sector will generate substantial revenue for us.
Since animated films currently attract more attention and we will be working on international animated film projects, the animation production sector will provide us with significant revenue.
By establishing an animation production company, we will generate substantial revenue within a few months.
By utilizing artificial intelligence tools as well, we will be able to produce animated films more quickly.
We will produce professional-quality animated films covering a wide range of topics.
Since we will be producing animated films across many categories and in multiple languages, our viewership will increase rapidly.
Since animated films are currently very popular and we excel in the field of advertising, the animated films we produce could garner millions of views in a short time.
How will revenue be generated, and how will we increase our audience?
Since the animated films we will produce will be in many languages, it will increase the viewership of our animated films internationally.
Since we will produce animated films in many categories instead of just one, the animated films we make will receive more viewership.
We will produce animated films in at least seven different categories every year.
Since we will produce high-quality and more professional animated films, our films will be watched by millions internationally.
We will earn money per view by sharing the animated films we produce on various social media platforms such as YouTube, Instagram, Facebook, and TikTok.
Since the animated films we will produce will be in many languages, we will earn money per ticket by screening our animated films in cinemas of many countries.
We will earn revenue per ticket by screening the animated films we produce in movie theaters across many countries.
By releasing the animated films we produce on various streaming platforms such as Netflix and Amazon Prime, we will generate significant revenue.
We will release the films we produce on our own website; through a paid subscription model, viewers wishing to watch our animated films will purchase subscriptions, thereby generating revenue for us.
As the audience for the animated films we produce grows, we will generate significant revenue by promoting sponsors' products in our future animated films.
By embedding trailers of the animated films we produce onto blogs and news sites, we will increase the international viewership of our animated films.
By promoting our animated films on various high-traffic websites and social media accounts, we will achieve a large audience.
By using advertising tools such as Google Ads, YouTube Ads, and Facebook Ads, we will be able to introduce our animated films to the entire world more quickly.
As our fan base grows, we will generate extra revenue by producing and selling productsโsuch as toys, mugs, and sweatersโfeaturing the characters from our animated films.
We will generate significant revenue by broadcasting our animated films on television channels in many countries.
By employing a very strong marketing strategy, we will generate millions of dollars in revenue from the animated film industry in a short time.
How will the process work?
First, we will establish an educational website offering professional-level training in animated film production.
Even someone with absolutely no knowledge of making animated films can become a professional within one month by studying the animation course on our training site.
We will train and hire our own animation production staff.
Since we will train our team ourselves, we will be able to work in a more coordinated manner, which will enable us to complete the animated films we produce more quickly.
Within two months, we will have trained and recruited staff to establish our own animation film production team.
We will assemble a professional-level animated film production team within two months.
Within two months of assembling our animation film production team, we will produce professionally designed animated films covering various topics and in multiple languages
We will produce animated films in at least 7 different categories within two months.
Once our animated films are completed, we will release them in various places and start earning money within two months.
We will generate substantial profits within two months of completing our animated films, thanks to our strong marketing strategy.
Within two months, we will rapidly generate substantial revenue by releasing our film on platforms such as Netflix, Amazon Prime, TikTok, Instagram, and YouTube, as well as in movie theaters across many countries.
One month after releasing our animated film internationally, we will generate revenue of at least 7 million US dollars.
We will generate at least 7,000,000 US dollars in revenue one month after releasing our animated films in many countries.
Since the animated films we produce will be in multiple languages โโand across various categories, they will quickly garner high viewership.
Today, animation film production companies generate average annual earnings of at least 800 million US dollars.
Thanks to our strong advertising tactics, we will generate more revenue in the future.
We will have generated at least 7,000,000 US dollars in revenue within a total of 7 months.
How much income will you generate by investing 185,000 US dollars in our holding company?
If you lend 185,000 US dollars to our holding, I will return your money as 370,000 US dollars on 30/04/2027.
If you invest 185,000 US dollars in our holding, I will return your money as 370,000 US dollars on 30.04.2027.
We will increase the 185,000 US dollars you have lent to our holding company by utilizing it in the animated film production sector, and I will return the funds to you as 370,000 US dollars on April 30, 2027.
I will return your money to you as 370,000 US dollars on April 30, 2027.
April 30, 2027, is the date we will repay your money.
You will have generated twice as much revenue within a few months.
I will repay you the 185,000 US dollars you lent to our holding company as 370,000 US dollars when the date of April 30, 2027, arrives.
We will invest the 185,000 US dollars you have lent to our holding company into the animated film production sector to further increase the amount, and when April 30, 2027, arrives, I will return the money to you as 370,000 US dollars.
By investing 185,000 US dollars in our holding company, you will generate substantial returns in a short periodโdon't miss this opportunity.
How to contact us:
To learn how you can grow your money by investing in our holding company, send a message to my Telegram username, Signal number, or email address listed below, and I will provide you with detailed information.
To learn more about our animated film project and how you can invest 185,000 US dollars in our holding, send a message to my Telegram username, Signal contact number, or email address below, and I will provide you with detailed information.
To learn how you can lend 185,000 US dollars to our holding and increase your money even more within a few months, and to get detailed information, send a message to my Telegram username, Signal contact number, or email address below, and I will provide you with detailed information.
Send us a message via Telegram, Signal, or email for detailed information.
I have listed our contact details below; you can obtain detailed information by sending a message to any of them.
To learn how you can lend 185,000 US dollars to our holding and to get detailed information about our animated film project, send a message to my Telegram username, Signal contact number, or email address below, and I will provide you with detailed information.
To learn how you can further increase your money within a few months by investing 185,000 US dollars in our holding and to get detailed information about our animated film production project, send a message to my telegram username, signal username, or email address below.
To learn how you can increase your money, send a message to my Telegram username, Signal contact number, or email address below.
My Telegram username:
@adenholding
Signal contact number:
+447842572711
Signal username:
adenholding.88
my email address:
adenholding27@yahoo.com
does start9 even update?