Solana validators told to act immediately as critical Linux vulnerability emerges
Summary
Anza urged Solana mainnet-beta validators to take temporary precautions against CVE-2026-98432, a critical Linux kernel flaw that may enable unauthenticated remote root access under specific MPTCP configurations. Ubuntu had not yet released its fix as of Nov. 2, leaving some operators reliant on mitigations such as disabling MPTCP and blocking IPv4 options. A research demonstration showed command execution on a configured Linux server, but there is no evidence Solana validators have been compromised, and exposure depends on kernel and network settings. AWS had released corrected packages for its Linux distributions.
