Came across the Intersect weekly update: a reminder for Cardano stake pool operators (SPOs) to check the Linux kernels on block producers and relays — CVE-2026-98432, CVSS 9.8, an IPv4/TCP use-after-free vulnerability affecting multiple distributions, including Ubuntu.
The key point: some distributions have already released patched kernels, while Ubuntu and others are still rolling out packages. The official advice is to install the patch and reboot as soon as it’s available. So far, there are no public reports of exploitation or nodes being attacked. The main thing is not to delay.
Node 11.2 also went live as a pre-release this week (Dijkstra is feature-complete except for Leios); it’s not yet recommended for mainnet.
For relays exposed to the public internet, a kernel vulnerability is more fundamental than an application-layer one — better to patch a day early than wait.
$ADA #Cardano #Security
The key point: some distributions have already released patched kernels, while Ubuntu and others are still rolling out packages. The official advice is to install the patch and reboot as soon as it’s available. So far, there are no public reports of exploitation or nodes being attacked. The main thing is not to delay.
Node 11.2 also went live as a pre-release this week (Dijkstra is feature-complete except for Leios); it’s not yet recommended for mainnet.
For relays exposed to the public internet, a kernel vulnerability is more fundamental than an application-layer one — better to patch a day early than wait.
$ADA #Cardano #Security
