WiremarketsDextape brief
Anza Sounds the Alarm for Solana Validators on a Linux Bug Ubuntu Hasn’t Fixed
Ubuntu had not shipped a patched kernel for CVE-2026-98432 by Monday afternoon. The flaw can let a remote attacker run code on a server, and AWS and Red Hat say the workarounds available until a fix lands don't fully protect against it.
Dextape brief
Anza, the team behind Solana's Agave validator client, sent an urgent alert on Sunday evening urging validators to act on CVE-2026-98432, a Linux kernel flaw that could let a remote attacker without credentials run code on a server. The warning arrived before Ubuntu had a fix. Anthropic said an unreleased research model found the flaw and built a working exploit. As of Monday afternoon, Ubuntu's tracker still listed standard 24.04 and 22.04 kernels as vulnerable, with fixes in progress but none released. AWS has shipped fixed Amazon Linux kernels, and Red Hat rates the flaw Critical while saying its packet filter cannot fully prevent exploitation. The alert came less than two weeks after Solana activated its Alpenglow consensus engine on mainnet.
Why it matters: It shows how a Linux kernel bug could expose Solana validator servers to remote code execution while patches remain unavailable on Ubuntu.
Read the full story
Mentioned in this story
Open a coin page for its current price.