DEV Community

Cover image for New Linux Kernel Vulnerability (CVE-2026-98432): What to Do Now
sadik sajid
sadik sajid

Posted on Edited on

New Linux Kernel Vulnerability (CVE-2026-98432): What to Do Now

#security #sysadmin #linux #devops

On October 29, a security vulnerability was announced in the Linux kernel: CVE-2026-98432.

It affects how Linux handles new network connections and, in some cases, could let an attacker take control of a server remotely. Almost every Linux distribution is affected, including the ones commonly used on VPS.

The permanent fix

The permanent fix is a kernel update for your operating system. Not every distribution has released one yet, so here is what to do for each.

Debian 12 or 13: fix available now 

apt update && apt upgrade
Enter fullscreen mode Exit fullscreen mode

Then restart your server.

Ubuntu: fix not released yet

Once the fix is released, run:

apt update && apt upgrade
Enter fullscreen mode Exit fullscreen mode

Then restart your server.

AlmaLinux, Rocky Linux and other RHEL-based systems: fix not released yet

Once the fix is released, run:

dnf update kernel
Enter fullscreen mode Exit fullscreen mode

Then restart your server.

A restart is required

Automatic updates can install the new kernel, but your server keeps running the old one until it restarts. Restart with:

reboot
Enter fullscreen mode Exit fullscreen mode

To check which kernel you're currently running:

uname -r
Enter fullscreen mode Exit fullscreen mode

Summary

Distribution Fix status Command
Debian 12 / 13 Available now apt update && apt upgrade
Ubuntu Not released yet apt update && apt upgrade
AlmaLinux / Rocky / RHEL-based Not released yet dnf update kernel

Always reboot after the update. If you manage Linux servers, share this with your team.

Top comments (0)