In October 2026, a serious security vulnerability in the Linux kernel became known (CVE-2026-98432). It affects the way Linux accepts new network connections and could allow an attacker to take over a server remotely. Almost all Linux distributions are affected.
It can only be triggered with network packets containing so-called IP options. These are exactly the packets that the firewalls in front of our systems have always discarded by default. The attack path from outside is therefore blocked — regardless of operating system and kernel version, and without any effect on your normal data traffic.
Status as of 2 November 2026: We have no indication of any attempts to exploit the vulnerability on our systems.
The vulnerability is fixed permanently by a kernel update. Where we are responsible for operating system updates, we will install it as soon as it is available for the respective distribution.
If you manage your server yourself, we recommend updating your distribution (Debian and Ubuntu: apt update && apt upgrade · AlmaLinux, Rocky Linux and other RHEL-based systems: dnf update kernel) followed by a reboot — without it, the old kernel keeps running. There is no rush; our protection remains in place. We will be happy to do this for you; just get in touch.