Solana validators told to act immediately as critical Linux vulnerability emerges

Solana validators have been urged to secure their servers against a critical Linux vulnerability that Ubuntu has yet to patch.Anza, a Solana-focused software developer, issued an urgent warning to mainnet-beta validators on Nov. 1, calling for immediate action against CVE-2026-98432, a vulnerability that could allow hackers to remotely take control of affected Linux servers.Tim Garcia, validator relations lead at the Solana Foundation, said the underlying flaw had already been fixed in the Linux kernel but remained unpatched in Ubuntu, an operating system commonly used by Solana validators.He stated:“Validators! CVE-2026-98432 is patched in the linux kernel but not yet patched on ubuntu.”He advised affected operators to block incoming TCP packets containing IPv4 options, disable Multipath TCP (MPTCP), and turn off TCP request-socket migration until a security update becomes available.The warning places Solana's validator infrastructure among systems potentially exposed to a vulnerability with a critical severity score of 9.8 out of 10.Researchers demonstrate remote server takeover as Ubuntu fix lagsThe flaw stems from a memory-handling error during IPv4 TCP connection processing th...