Intersect Warns Cardano Stake Pool Operators About Linux Kernel Vulnerability
The advisory covers servers running affected Linux kernels, including systems used for block production and relay connections.
By SongMarketCap
Intersect has warned Cardano stake pool operators about a Linux kernel vulnerability affecting several distributions used to run server infrastructure.
In its October 30 weekly update, the organization advised operators to check the kernels on their block producers and relays. Fixes were already available for some distributions, while others were still preparing updates.
Linux Kernel Vulnerability Affects Multiple Distributions
The vulnerability, identified as CVE-2026-98432, concerns the Linux kernel’s handling of certain network requests using IPv4 and TCP. Intersect identified Ubuntu among the affected distributions.
Ubuntu’s security advisory lists a CVSS score of 9.8 out of 10, classified as critical under that scoring system. Ubuntu separately assigns the issue a high priority.
In an advisory updated October 30, Ubuntu listed the standard kernels for versions 22.04, 24.04, 26.04 and 26.10 as vulnerable, with fixes in progress. The status varies by release and kernel package.
The vulnerability is in Linux, the operating system used by many servers. Intersect did not report an exploit against a Cardano stake pool in its update.
Why Cardano Stake Pool Infrastructure Is Included
Stake pools participate in Cardano’s consensus process and produce blocks. Their infrastructure typically includes a block producer and one or more relays that communicate with other nodes.
The block producer performs the pool’s block production duties, while relays exchange network information with peers. Either type of server can run an affected Linux kernel.
Ubuntu describes the issue as a memory management error. Under certain conditions, the kernel can attempt to read information from memory that has already been freed while processing a network request.
The warning therefore depends on the software installed on an operator’s servers. It does not identify a vulnerability in the Cardano protocol itself.
[NEWSBREAK]
Patch Availability Depends on the Kernel
Intersect recommended that operators install a fixed kernel and reboot as soon as their distribution makes the update available.
Ubuntu’s security page tracks affected packages individually, including standard and specialized kernels. Operators can use the advisory for their distribution and package to check whether a fix has been released.
Intersect plans to share further guidance through its X account and stake pool operator channels as it becomes available.