Critical Security Update Completed – CVE-2026-98432 (CVSS 9.8)

We would like to inform you that IndicHosts has successfully completed emergency security maintenance across our server and network infrastructure to address a recently disclosed critical Linux kernel vulnerability, identified as CVE-2026-98432.

 

All affected systems under our management have now been secured against this vulnerability, and the required security updates have been completed.

 

What is CVE-2026-98432?

CVE-2026-98432 is a critical security vulnerability affecting the Linux operating system kernel, specifically its IPv4 TCP networking subsystem.

The vulnerability involves a memory-management flaw that could potentially allow an unauthenticated remote attacker to:

• Execute malicious code remotely with elevated system privileges.
• Cause server crashes or denial-of-service conditions.
• Compromise system integrity and potentially gain unauthorized access to sensitive information.
• Disrupt services hosted on vulnerable infrastructure.

Security Severity: CRITICAL
CVSS Score: 9.8 out of 10

 

This is among the highest severity classifications assigned to cybersecurity vulnerabilities. Of particular concern is that exploitation may be possible remotely, without requiring valid login credentials or any action by the server’s users.

 

 

Why Was Emergency Maintenance Necessary?

Unlike ordinary software vulnerabilities, this security flaw affects the Linux kernel itself — the core component responsible for managing operating system resources, memory, and network communications.

Given its critical severity and the potential for remote exploitation, delaying remediation until our next scheduled maintenance window would have unnecessarily exposed customer infrastructure to security risks.

Our security and infrastructure teams therefore initiated emergency maintenance at short notice.

 

Protecting customer data, server integrity, and the security of our hosting environment took priority over postponing essential maintenance.

 

What Actions Were Taken?

Our infrastructure teams undertook the following measures:

1. Reviewed our server infrastructure to identify potentially affected systems.
2. Applied the relevant vendor-provided kernel security updates and protective measures.
3. Performed full operating system reboots on multiple servers where required to activate the updated kernels.
4. Verified that the updated systems and essential hosting services were functioning correctly.
5. Completed post-maintenance security and operational checks.

Because kernel security updates often require a complete system restart, several servers had to undergo full reboots rather than ordinary service restarts.

 

These reboots were necessary to ensure that the vulnerable kernel code was no longer running.

 

Why Was Advance Notice Limited?

We recognize that customers normally expect advance notification of maintenance activities, particularly those requiring server restarts. However, vulnerabilities of this severity demand an immediate response. Providing the usual advance notice would have delayed the deployment of essential security protections. We therefore made the decision to proceed with emergency maintenance to minimize the period of potential exposure.

 

We appreciate your understanding of this necessary precaution.

 

Current Security Status

The emergency security maintenance has been completed successfully.

All affected systems under our management have received the necessary remediation, and the infrastructure has been returned to normal operation.

 

Our teams will continue monitoring security advisories and applying preventive measures as part of our ongoing infrastructure security programme.

 

Our Commitment to Security

At IndicHosts, protecting our customers’ websites, applications, email services, and hosted data remains a fundamental responsibility.

 

We continuously monitor emerging security threats and take proactive action when vulnerabilities pose a significant risk to our infrastructure.

 

While emergency maintenance can occasionally require short-notice interruptions, we believe that promptly addressing critical security threats is essential to maintaining a secure and dependable hosting environment.

 

Additional Technical Information:

Vulnerability: CVE-2026-98432
Severity: Critical (CVSS 9.8/10)
Affected Component: Linux Kernel – IPv4 TCP Networking
Maintenance Status: Completed
Security Remediation: Completed

Official Vulnerability Reference:
https://nvd.nist.gov/vuln/detail/CVE-2026-98432