Handshake

Security

Status

Cardano

Kernel

<p>Intersect, the member-based organization that coordinates Cardano (<a href="https://x.com/Cardano" rel="noopener noreferrer nofollow">@Cardano</a>) governance, has urged <a href="https://x.com/search?q=%24ADA&amp;src=cashtag_click" rel="noopener noreferrer nofollow">$ADA</a> stake pool operators to patch and reboot their servers after the disclosure of a critical Linux kernel vulnerability. <cite>According to Intersect's guidance, operators should check the kernels on both block producers and relay servers and install their distribution's fixed kernel as soon as it is published.</cite></p>
<p>No exploitation targeting Cardano has been reported. <cite>Intersect's advisory does not report attacks against the network or say how many pools run vulnerable kernels, according to KuCoin News.</cite></p>
<h2 id="what-is-cve-2026-98432">What Is CVE-2026-98432?</h2>
<p>The flaw is tracked as CVE-2026-98432. <cite>It carries a CVSS 3.1 score of 9.8, rated critical, from kernel.org.</cite><cite>It affects how the kernel handles incoming IPv4 TCP connections and can cause the kernel to access memory after it has been freed.</cite></p>
<p>Red Hat's security bulletin describes the risk in more detail. <cite>A remote, unauthenticated attacker could exploit a race condition during TCP connection request processing to trigger remote code execution.</cite><cite>Exploitation requires precise timing of network requests but does not require any privileges or user interaction.</cite><cite>Red Hat says it is expediting the release of fixes.</cite></p>
<p>Severity ratings have differed between vendors. According to security firm Ostorlab, <cite>Red Hat raised its rating to Critical, CVSS 3.1 9.8, on October 30, 2026.</cite> Earlier assessments from Red Hat had been lower, and some third-party reports still cite those scores.</p>
<h2 id="patch-status-and-interim-steps-for-operators">Patch Status and Interim Steps for Operators</h2>
<p>Fix availability varies by Linux distribution. <cite>On October 30, Canonical's tracker showed Ubuntu fixes in progress, while AlmaLinux reported patched kernels in testing.</cite> Ostorlab noted that <cite>no fixed kernel was yet available for Ubuntu or RHEL as of November 1, 2026.</cite></p>
<p>For operators who cannot patch immediately, <cite>Intersect advised disabling MPTCP and applying firewall rules as temporary steps, but a patched kernel and reboot are needed for full protection.</cite> Red Hat also cautions that its packet-filter procedure in bulletin RHSB-2026-016 <cite>reduces exposure and cannot fully prevent exploitation.</cite></p>
<p>The warning matters for the Cardano network because stake pool operators run the block producer and relay servers that keep the chain running. Operators are advised to monitor their distribution's security tracker and apply the fixed kernel once it is released.</p>
<h3 id="sources">Sources</h3>
<p><a href="https://access.redhat.com/security/vulnerabilities/RHSB-2026-016" rel="noopener noreferrer nofollow">Red Hat Security Bulletin RHSB-2026-016 on CVE-2026-98432</a><br><a href="https://thedefiant.io/news/security/intersect-urges-cardano-operators-to-patch-critical-linux-flaw" rel="noopener noreferrer nofollow">The Defiant: Intersect Urges Cardano Operators to Patch Critical Linux Flaw</a><br><a href="https://blog.ostorlab.co/linux-kernel-tcp-race-rce-cve-2026-98432.html" rel="noopener noreferrer nofollow">Ostorlab: Linux Kernel TCP Handshake Race RCE (CVE-2026-98432)</a></p>

Intersect Urges Cardano (ADA) Stake Pool Operators to Patch Critical Linux Kernel Flaw CVE-2026-98432

Table of Contents

BSCN

Other articles published on Nov 2, 2026

Join our free newsletter for daily crypto updates!