Add as a preferred source on GoogleSolana Foundation Urges Ubuntu Validators to Mitigate Unpatched Kernel Flaw
Tim Garcia said the kernel issue has been fixed, but Ubuntu has not released its patch. His temporary guidance covers IPv4-option packets and two TCP features.
Solana Foundation validator relations lead Tim Garcia urged validators running Ubuntu to apply temporary network mitigations, saying the operating system has not released a patch for Linux kernel vulnerability CVE-2026-98432.
Garcia said the kernel flaw has been fixed, leaving Ubuntu users without a published patch for the issue. Until an Ubuntu update is available, he recommended blocking inbound TCP packets that contain IPv4 options. He also advised disabling Multipath TCP and TCP request socket migration.
The guidance covers three specific network settings: handling incoming TCP packets with IPv4 options, Multipath TCP and migration of TCP request sockets. Validators on Ubuntu would use the temporary measures while the operating system’s patch remains unavailable. The recommendations are directed at Ubuntu-running validators, not all Solana validators regardless of operating system.
The notice puts the immediate focus on temporary configuration changes for Ubuntu validators. It identifies the vulnerability by its CVE number and says the underlying kernel issue has been fixed, while Ubuntu’s patch has not yet been released.
Simon Yoon
ReporterSimon Yoon reports on blockchain technology for TokenPost. Send corrections or tips to info@tokenpost.com.