Matt Corallo Flags Critical Linux Kernel Flaw; Lightning Labs Ships LND Mitigation
By Juan Galt
AI summary of the source article
Lightning Labs issued emergency LND updates after developer Matt Corallo warned of a critical Linux kernel vulnerability. The updates disable MPTCP listeners by default to mitigate potential remote root exploits against Bitcoin Lightning nodes.
Why it matters
The project described the change as a mitigation, not a fix, and noted that "only a patched kernel fully resolves the underlying issue. Other services on the same machine remain exposed until MPTCP is disabled host-wide or the kernel is updated."
Key facts
- Linux kernel vulnerability CVE-2026-98432 affects IPv4 TCP handshake code with a CVSS severity score of 9.8.
- Lightning Labs released emergency updates lnd v0.21.6-beta and v0.20.7-beta, disabling MPTCP listeners by default.
- The demonstrated exploit path targets MPTCP listeners, which Go 1.24 and later enable by default.
Source excerpt · Bitcoin Magazine
Bitcoin Magazine Matt Corallo Flags Critical Linux Kernel Flaw; Lightning Labs Ships LND Mitigation Bitcoin Core and Lightning developer Matt Corallo highlighted CVE-2026-98432 on October 30, a use-after-free in the Linux kernel IPv4 TCP handshake code scored CVSS 9.8. Anthropic’s Frontier Red Team demonstrated a remote root exploit against systems with a Multipath TCP listener. This post Matt Cor…