Anza and the Solana Foundation have urged operators to secure affected servers after researchers demonstrated an exploit capable of remote command execution.

Solana validators have been urged to secure their servers against a critical Linux vulnerability that Ubuntu has yet to patch.

Anza, a Solana-focused software developer, issued an urgent warning to mainnet-beta validators on Nov. 1, calling for immediate action against CVE-2026-98432, a vulnerability that could allow hackers to remotely take control of affected Linux servers.

Tim Garcia, validator relations lead at the Solana Foundation, said the underlying flaw had already been fixed in the Linux kernel but remained unpatched in Ubuntu, an operating system commonly used by Solana validators.

“Validators! CVE-2026-98432 is patched in the linux kernel but not yet patched on ubuntu.”

He advised affected operators to block incoming TCP packets containing IPv4 options, disable Multipath TCP (MPTCP), and turn off TCP request-socket migration until a security update becomes available.

The warning places Solana's validator infrastructure among systems potentially exposed to a vulnerability with a critical severity score of 9.8 out of 10.

The flaw stems from a memory-handling error during IPv4 TCP connection processing that can allow attackers to exploit a race condition without authentication or user interaction.

In research published Oct. 27, Anthropic disclosed that an unreleased Claude research model developed an exploit capable of executing commands with root privileges on Linux servers running an MPTCP listener.

Start with the stories that matter. Get the context behind the headlines and a clear view of what to watch next.

Source link