Matt Corallo called out a Linux kernel vulnerability with a CVSS score of 9.8.
On October 30, he highlighted CVE-2026-98432: a use-after-free in the Linux kernel’s IPv4 TCP handshake code. Anthropic’s Frontier Red Team demonstrated a remote root exploit against systems with Multipath TCP listeners enabled. Lightning Labs subsequently released mitigations for LND.
· The vulnerability is in the TCP handshake code and is not limited to machines running Lightning Network nodes.
· Mitigations have been released for LND, but the kernel-level issue still needs to be addressed through your Linux distribution’s patching process.
Does your node run a custom kernel or a distribution kernel?
On October 30, he highlighted CVE-2026-98432: a use-after-free in the Linux kernel’s IPv4 TCP handshake code. Anthropic’s Frontier Red Team demonstrated a remote root exploit against systems with Multipath TCP listeners enabled. Lightning Labs subsequently released mitigations for LND.
· The vulnerability is in the TCP handshake code and is not limited to machines running Lightning Network nodes.
· Mitigations have been released for LND, but the kernel-level issue still needs to be addressed through your Linux distribution’s patching process.
Does your node run a custom kernel or a distribution kernel?
