Critical Linux Kernel Vulnerability Poses Remote Root Risk to Networked Infrastructure

A critical vulnerability (CVE-2026-98432) in the Linux kernel’s IPv4 TCP handshake code presents a remote root exploit risk for systems utilizing Multipath TCP (MPTCP). The flaw carries a CVSS severity score of 9.8, with security researchers confirming active internet-wide scanning for exposed MPTCP listeners.

Bitcoin Lightning Network nodes running LND are particularly susceptible due to Go-based default configurations that enable MPTCP listeners. While Lightning Labs has released emergency software updates to disable these listeners, such measures serve only as a mitigation; the underlying kernel vulnerability remains active until a system-level patch is applied.

Institutional operators are advised that while major distributions including Red Hat, Debian, and Amazon Linux have issued patches, Ubuntu users may face delayed availability in standard update channels. Organizations should prioritize kernel updates across all internet-facing infrastructure, as the vulnerability affects any service utilizing MPTCP, not exclusively Lightning node software.