Cardano Warns of Critical Linux Flaw: Is Your ADA at Risk?

Dextape brief

By Dextape Desk · November 1, 2026

Intersect, Cardano's coordinating group, warned stake pool operators on October 30 about Linux flaw CVE-2026-98432, rated 9.8 out of 10. Linux runs many Cardano block-producing servers, and crafted internet requests can confuse memory handling, potentially crashing them or, in some setups, letting outsiders take control without a password. Anthropic said on October 27 that its Claude AI built a working attack against multipath TCP servers in a 53-minute test. Staked ADA stays in holders' wallets, and hijacking a pool would not transfer those coins. Offline servers could cut block output and rewards. So far, the flaw has not been linked to stolen funds or lost rewards, and no Cardano pool attack has been reported. Upstream Linux fixed it on October 5, but Ubuntu, Red Hat and AlmaLinux fixes are still pending or in testing.

Why it matters: It matters because the flaw targets the infrastructure that produces Cardano blocks, so outages could reduce staker rewards even though holders' ADA stays in wallets.

Mentioned: Cardano

Summary by Dextape, based on reporting by BeInCrypto. Written with AI from the publisher’s text and checked automatically for copied wording and unsupported figures. Not investment advice.