Matt Corallo Flags Critical Linux Kernel Flaw; Lightning Labs Ships LND Mitigation
AI summary
Bitcoin Core and Lightning developer Matt Corallo flagged CVE-2026-98432 on October 30, a use-after-free flaw in the Linux kernel IPv4 TCP handshake code rated CVSS 9.8. Anthropic's Frontier Red Team demonstrated a remote root exploit against systems running a Multipath TCP listener, and Lightning Labs has shipped an LND mitigation. A remotely exploitable root-level kernel bug matters to node operators because Lightning and Bitcoin nodes commonly run on Linux, so unpatched hosts could be compromised.
