Hacking News
Solana Validators Urged to Secure Servers Against Critical Linux Vulnerability
Anza and the Solana Foundation urged Solana validators to secure their servers against a critical Linux vulnerability, CVE-2026-98432, which could allow hackers to remotely take control of affected Linux servers. The vulnerability, rated 9.8 out of 10, has already been fixed in the Linux kernel but remains unpatched in Ubuntu, an operating system commonly used by Solana validators. Tim Garcia, validator relations lead at the Solana Foundation, advised affected operators to block incoming TCP packets containing IPv4 options, disable Multipath TCP (MPTCP), and turn off TCP request-socket migration until a security update becomes available.