CONNECT WITH US
Web3 & Blockchain

Web3 & Blockchain

Matt Corallo Flags Critical Linux Kernel Flaw; Lightning Labs Ships LND Mitigation

Bitcoin Magazine logo

Published on

Add as a preferred source on Google
Matt Corallo Flags Critical Linux Kernel Flaw; Lightning Labs Ships LND Mitigation

Bitcoin Magazine

Matt Corallo Flags Critical Linux Kernel Flaw; Lightning Labs Ships LND Mitigation

Bitcoin Core and Lightning developer Matt Corallo highlighted a severe Linux kernel vulnerability on October 30, criticizing Ubuntu’s delayed response to what he called “the most critical Linux vuln ever.” The bug, tracked as CVE-2026-98432, affects the kernel’s IPv4 TCP handshake code with a CVSS severity score of 9.8. Anthropic’s Frontier Red Team later showed it could be turned into a remote root exploit against systems exposing a Multipath TCP (MPTCP) listener.

Peter Todd echoed the warning the same day, advising anyone running LND on Linux with open ports to shut their Bitcoin Lightning nodes down until the kernel was patched or otherwise mitigated. The demonstrated exploit path relies on an MPTCP listener—something Go 1.24 and later enable by default. Because LND is written in Go, recent versions were listening with MPTCP on their peer, gRPC, and REST ports whenever the kernel had the feature enabled.

Lightning Labs responded the same day with emergency releases: lnd v0.21.6-beta and the backport v0.20.7-beta. Both disable MPTCP listeners by default, closing the demonstrated exploit path through LND. The project described the change as a mitigation, not a fix, and noted that only a patched kernel fully resolves the underlying issue. Other services on the same machine remain exposed until MPTCP is disabled host-wide or the kernel is updated. Olaoluwa Osuntokun and the official Lightning Labs account both recommended the update.

Security researcher Marcus Hutchins later reported internet-wide scanning activity consistent with threat actors looking for exposed systems.


Source link
Related Topics:Web3 & Blockchain

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.