Regular IT partner for SMEs since 2018 ·  News  ·  Outages

Kritische Securitylücke im Linux Kernel (CVE-2026-98432, CVSS 9.8) | Critical vulnerability in the Linux Kernel (CVE-2026-98432, CVSS 9.8)

Disruptions - Cloud information

The Security Luck CVE-2026-98432 is a source of security information and can ensure that the system is fully operational. Affected since all Kernel from Version 4.4, unaffected by used products. Details: https://www.cve.org/CVERecord?id=CVE-2026-98432

If you wish to filter your backbone, you will be able to access the network. This takes the risk of all products, including a kernel update.

Web Hosting, Managed Server and Managed Cloud Cluster: We will be able to update your business system and get started soon.

Root Server and VPS: Update the Kernel itself and start your System now. Updates for Debian 12/13, RHEL 8 bis 10 and additional SLES/openSUSE for. For Ubuntu, AlmaLinux and Rocky Linux they are now available (as of 3 November 2026), please check back soon. Not more available versions for Debian 11 or Ubuntu 20.04 are available for a fix, here you can also upgrade.

Weiterführende Links:
NIST cve-2026-98432 Details
Redhat Seucrity Tracker
Debian security Tracker


The security vulnerability CVE-2026-98432 can be exploited remotely without authentication and can crash systems or lead to full takeover. All kernels from version 4.4 onwards are affected, regardless of the product used. Details: https://www.cve.org/CVERecord?id=CVE-2026-98432

On our backbone, we filter attack attempts at the network level. This reduces the risk for all products but does not replace a kernel update.

Webhosting, Managed Server, and Managed Cloud Clusters: We have already updated and rebooted the operating systems — you don't need to do anything.

Root Servers and VPS: Please update the kernel yourself and reboot the system afterwards. Updates are available for Debian 12/13, RHEL 8 to 10, and partially for SLES/openSUSE. Updates for Ubuntu, AlmaLinux, and Rocky Linux are still pending (as of November 3, 2026); please check daily. No longer maintained versions such as Debian 11 or Ubuntu 20.04 will not receive a fix — an upgrade is the only option here.

Related links:
NIST cve-2026-98432 Details
Redhat Seucrity Tracker
Debian security Tracker

Questions about this topic?

We offer no-obligation advice regarding your hosting, email, workspaces, or website. Call or email us, and we'll see what suits you best.