# Ubuntu Standard Kernels Remained Vulnerable to Linux Flaw Anza Flagged

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/47223
Published: 2026-11-03T03:22:08.000Z
Updated: 2026-11-03T03:22:08.000Z
Section: Technology

> AWS has fixed kernels for Amazon Linux 2 and Amazon Linux 2023, but disabling Multipath TCP alone is insufficient; Red Hat warned its packet filter cannot fully prevent exploitation.

Anza urged Solana mainnet validators Sunday to mitigate Linux kernel vulnerability CVE-2026-98432 as Ubuntu's standard kernels for versions 22.04 and 24.04 remained vulnerable Monday afternoon ET, leaving operators without a released fix.

Anza develops Agave, Solana's validator client. Fixes for Ubuntu's standard kernel versions remained in progress. Anza's [earlier warning on temporary Linux mitigations](<https://www.tokenpost.com/news/technology/46026>) urged operators to make temporary changes pending a patch.

The flaw can allow remote code execution on a Linux server under specific network conditions. Anthropic said its proof of concept worked against a server with a Multipath TCP listener and could run commands with root privileges without credentials.

Anthropic said its Oct. 27 post described how an unreleased research model found the vulnerability and developed an exploit. The proof of concept took 48 minutes to expose a kernel memory address and five more minutes to begin running shell commands.

Amazon Web Services released patched kernels for Amazon Linux 2 and Amazon Linux 2023. Its interim steps include disabling Multipath TCP and filtering IPv4 packets carrying IP options. AWS said disabling Multipath TCP alone does not resolve the flaw and that a kernel update and reboot are the only complete remediation.

Red Hat said its packet filter reduces exposure but cannot fully prevent exploitation. The company also warned that filtering may disrupt some workloads and told customers to install updates once fixes are available.



## Links in this article

- [earlier warning on temporary Linux mitigations](https://www.tokenpost.com/news/technology/46026)
