CTIPilot
AI-generated · no human review · verify critical claims against the linked source. how it works →

XCP-ng

product · product:xcp-ng

Coverage
1
first 2026-10-31 → last 2026-11-05
Latest activity
2026-11-05
Linux TCP use-after-free: Citrix XenServer and XCP-ng fixes are out, WatchGuard and Fortinet still have none
Peak priority
notable
1 notable
Targets
technology
sectors: technology
Sources cited
20
19 hosts

Action items (2)

Do-now tasks recorded on the entries about XCP-ng, newest first. Check the date before acting on an older one.

  • On every internet-facing Linux server and every XenServer or XCP-ng host with its Workload Balancing and Conversion Manager appliances, install the vendor's fix and reboot as soon as it ships, then confirm the running version; Red Hat, Debian, CIQ, Amazon Linux, XCP-ng, MikroTik and Citrix updates are out, and XCP-ng says that a host which cannot reboot at once should take its iptables-based mitigation first and the update later.
    2026-10-31CVE-2026-98432
  • On hosts that cannot reboot yet, drop IPv4 TCP packets that carry IP options ahead of the TCP stack as CIQ, AWS and Vates describe, after testing on one non-production host because it also drops legitimate option-bearing traffic; disabling MPTCP alone does not close the path.
    2026-10-31CVE-2026-98432

Defender insights

What each entry about XCP-ng tells a defender to do, newest first.

2026-10-31NOTABLELinux TCP use-after-free: Citrix XenServer and XCP-ng fixes are out, WatchGuard and Fortinet still have none

Exposure · detection

Story timeline

  1. 2026-10-31CVE-2026-98432, Linux kernel IPv4 TCP: a use-after-free in connection setup, present since 4.4, has an Anthropic-built remote root exploit against MPTCP listeners that CloudLinux could not reproduce; Citrix XenServer, XCP-ng, MikroTik, Red Hat, Debian, CIQ and Amazon Linux have fixes, Ubuntu's are in progress and WatchGuard and Fortinet have none for their products (CVSS 9.8)
    trending-vulnerabilitiesLinux TCP use-after-free: Citrix XenServer and XCP-ng fixes are out, WatchGuard and Fortinet still have none

Hunting pivots

CVEs
CVE-2026-98432
Releases covered
XCP-ng
Tags
dospatch-availablepre-authrcevulnerabilitieszero-click
ATT&CK techniques (2 across 2 tactics)

2 techniques observed across 1 entry about this entity, derived from entry metadata and body evidence, never asserted without a published entry behind it · pinned to MITRE ATT&CK v20.0 · compare on the matrix · Navigator layer (JSON)

  • Initial AccessExploit Public-Facing Application
  • ImpactEndpoint Denial of Service: Application or System Exploitation

Initial Access TA0001

T1190Exploit Public-Facing Application×1

Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network. The weakness in the system can be a software bug, a temporary glitch, or a misconfiguration.

Evidence: 2026-10-31/cve-2026-98432-linux-kernel-tcp-uaf-mptcp-remote-root · ATT&CK page ↗

Impact TA0040

T1499.004Endpoint Denial of Service: Application or System Exploitation×1

Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users. Some systems may automatically restart critical applications and services when crashes occur, but they can likely be re-exploited to cause a persistent denial of service (DoS) condition.

Evidence: 2026-10-31/cve-2026-98432-linux-kernel-tcp-uaf-mptcp-remote-root · ATT&CK page ↗

Entries about XCP-ng (1)

2026-10-31 · view entry permalink →

NOTABLECVE-2026-98432updatedNATOB2

CVE-2026-98432, Linux kernel IPv4 TCP: a use-after-free in connection setup, present since 4.4, has an Anthropic-built remote root exploit against MPTCP listeners that CloudLinux could not reproduce; Citrix XenServer, XCP-ng, MikroTik, Red Hat, Debian, CIQ and Amazon Linux have fixes, Ubuntu's are in progress and WatchGuard and Fortinet have none for their products (CVSS 9.8)

The Linux kernel CVE team published CVE-2026-98432 on 2026-10-15: a use-after-free in the IPv4 TCP connection setup path, introduced in Linux 4.4 and fixed upstream in 6.12.113, 6.18.56, 7.2.10 and 7.3-rc7 (Linux kernel CVE team, 2026-10-15). An unauthenticated peer starts it by sending TCP SYN packets that carry IPv4 options, and a retransmitted SYN can then touch the freed option memory (CIQ, 2026-10-30).

Anthropic wrote on 2026-10-27 that Claude produced an exploit that gives a remote attacker root on a Linux server with a multipath TCP (MPTCP) listener (Anthropic, 2026-10-27), but CloudLinux's kernel team could not reproduce the claim (CloudLinux, 2026-11-02). The Go team says the bug is not specific to MPTCP (Go team, 2026-10-29). Akamai is not aware of a public working exploit and says disabling MPTCP alone does not prevent exploitation (Akamai, 2026-11-02), whereas Vates, XCP-ng and WatchGuard say a public exploit exists or circulates (XCP-ng, 2026-11-04; Vates, 2026-11-04; WatchGuard, 2026-11-03). No source reports attacks, and NCSC-NL judges large-scale abuse unlikely given the exploit's complexity (translated from Dutch) (NCSC-NL, 2026-10-30).

Severity is disputed: the CNA scores it 9.8, upstream 8.1 with high attack complexity (CIQ, 2026-10-30). Debian's security kernels are fixed (Debian Security Tracker, 2026-11-03); Red Hat has fixed RHEL 8, 9 and 10 (Red Hat, 2026-11-03); CIQ has patched kernels (CIQ, 2026-11-01); AWS has fixed Amazon Linux 2 and 2023 kernels (AWS, 2026-11-02); Ubuntu 22.04 to 26.10 are still marked vulnerable with work in progress in a tracker last updated 2026-11-04 (Canonical, 2026-11-04). Citrix rates its XenServer 8.4 and 9 bulletin Critical and has fixed its appliances (Citrix, 2026-11-03). XCP-ng released a kernel fix (XCP-ng, 2026-11-04; Vates, 2026-11-04), and MikroTik's RouterOS 7.25.1 and 7.24.6 changelogs list the CVE (MikroTik, 2026-11-02; MikroTik, 2026-10-30). WatchGuard lists Fireware OS, AP and Dimension as potentially affected with no fix (WatchGuard, 2026-11-03); Fortinet's advisory lists FortiOS, FortiProxy, FortiManager, FortiAnalyzer, FortiWeb and FortiAuthenticator among the products under investigation and names no fixed build (Fortinet, 2026-11-02).

Issue introduced in 4.4

Linux kernel CVE team (linux-cve-announce) 2026-10-15

allows a remote attacker to send packets to Linux servers with a multipath TCP listener to run arbitrary commands as root, without any credentials or user interaction

Anthropic Frontier Red Team 2026-10-27

While the demonstrated exploit requires the target system to expose an MPTCP listener, the underlying bug is not specific to MPTCP.

Go team (golang-announce) 2026-10-29

An unauthenticated network peer can start the flaw by sending TCP SYN packets that carry IPv4 options.

CIQ (Rocky Linux mitigation article) 2026-10-30

There are currently no confirmed reports of CVE-2026-98432 being exploited in the wild.

BleepingComputer 2026-10-30

Our kernel team couldn’t reproduce that claim.

CloudLinux (status post published 2026-10-30, updated 2026-11-02) 2026-11-02

Fortinet is currently investigating the impact of the CVE over Fortinet Products.

Fortinet PSIRT (FG-IR-26-188) 2026-11-02

Disabling MPTCP alone does not prevent exploitation; it only reduces the likelihood of triggering the race condition.

Akamai Security Intelligence Group 2026-11-02

An issue has been identified that may allow an unauthenticated attacker on the management network to compromise the host and/or any running Workload Balancing (WLB) or Conversion Manager appliances.

Citrix (security bulletin CTX697256) 2026-11-03

A public exploit exists. It relies on MPTCP, which the XCP-ng 8.3 kernel doesn't have, so this exploit doesn't work against XCP-ng.

XCP-ng (security update post) 2026-11-04

While Fireware OS and WatchGuard AP run vulnerable versions of the Linux kernel, they do not enable MPTCP and are not affected by the remote code execution (RCE) exploit chain circulating online.

WatchGuard PSIRT (WGSA-2026-0033) 2026-11-03
Updaterun 2026-11-01T1312Z-auditactionsbodycvessourcessourcing_notetitle

CIQ released patched kernels on 2026-10-31 for RLC Pro LTS 9.6 and FIPS 9.6 (kernel-5.14.0-570.60.1+27.2.el9_6_ciq), LTS 9.2 and FIPS 9.2 (kernel-5.14.0-284.30.1+45.1.el9_2_ciq) and LTS 8.6 (kernel-4.18.0-372.32.1+40.1.el8_6_ciq); RLC Pro LTS 8.10 and RLC Pro 10 are still waiting, and CIQ says the same fix was backported to the stable series 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.56 and 7.2.10 (CIQ, 2026-10-31). Ubuntu's tracker, last updated 2026-10-30, still lists its kernels as vulnerable with fixes in progress (Canonical, 2026-10-30), and Red Hat's page now gives a preliminary CVSS 3.1 score of 9.8 (Red Hat, 2026-10-31).

Updaterun 2026-11-03T0256Z-inteltitleheadlinesummarycvessourcesevidencesourcing_noteactionsbody

Fortinet published advisory FG-IR-26-188 on 2026-11-02, saying it is investigating the impact on its products and listing FortiOS, FortiProxy, FortiManager, FortiAnalyzer, FortiWeb and FortiAuthenticator among them, with no fixed build or workaround named (Fortinet, 2026-11-02). CloudLinux's kernel team could not reproduce Anthropic's remote-root claim (CloudLinux, 2026-11-02). AWS says fixed Amazon Linux 2 and 2023 kernels are available, that Network Load Balancer TCP listeners pass client packets, including IP options, to targets, and that Linux targets behind them, Global Accelerator, PrivateLink and VPC Lattice layer 4 need the kernel update or the interim steps themselves, in the bulletin as published on 2026-11-02; its revision of 2026-11-04 says Global Accelerator endpoints are not affected and no longer carries the Network Load Balancer paragraph (AWS, 2026-11-02). Akamai reports a similar flaw when request-socket migration is enabled and lists the stable fixes 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.56 and 7.2.10 (Akamai, 2026-11-02). CIQ's table lists patched kernels for RLC Pro 8, 9 and 10 and FIPS 8.6 and 8.10 released on 2026-11-01 (CIQ, 2026-11-01).

Updaterun 2026-11-05T0255Z-inteltitleheadlinesummaryentitiesaffected_productscvessourcesevidencesourcing_noteactionsbody

Citrix's bulletin CTX697256 of 2026-11-03, rated Critical, says an unauthenticated attacker on the management network may compromise a XenServer host and any running Workload Balancing or Conversion Manager appliance; it affects XenServer 8.4 and 9, Workload Balancing before 2026.1.1 and Conversion Manager before 2026.2.0, and Citrix has pushed updates to the Early Access and Normal channels of each XenServer line without naming a build and released Workload Balancing 2026.1.1 or later and Conversion Manager 2026.2.0 (Citrix, 2026-11-03). The bulletin states no exploitation.

Vates's advisory VSA-2026-056, published on 2026-11-03 and updated on 2026-11-04, rates the flaw critical for XCP-ng 8.3 and the Xen Orchestra Appliance, lists the fixed packages kernel-4.19.19-8.0.46.14.xcpng8.3 and, for the appliance, linux 6.1.190-1, requires a reboot, and gives an interim mitigation that drops inbound IP options, because without IP options the vulnerable code path cannot be reached (Vates, 2026-11-04). XCP-ng's post of 2026-11-04 says anyone who can send TCP traffic to the host, for example from its management network, VMs on it included, can attempt the attack, and tells hosts that cannot reboot at once to apply the iptables-based mitigation and not yet the update (XCP-ng, 2026-11-04). XCP-ng says a public exploit exists that relies on MPTCP, which the XCP-ng 8.3 kernel does not have, so it does not work against XCP-ng, while the underlying bug is present and other ways to exploit it cannot be ruled out (XCP-ng, 2026-11-04); Vates says the exploit does not affect XCP-ng and the bug is not specific to MPTCP (Vates, 2026-11-04).

WatchGuard's advisory WGSA-2026-0033 of 2026-11-03 lists Fireware OS, AP and Dimension as potentially affected with no fix, says Fireware OS and AP do not enable MPTCP and are not affected by the exploit chain circulating online, and says it will update the advisory when Ubuntu ships a fix for Dimension (WatchGuard, 2026-11-03). MikroTik's RouterOS 7.25.1 of 2026-11-02 and RouterOS 7.24.6 of 2026-10-30 list the CVE under "improve stability" (MikroTik, 2026-11-02; MikroTik, 2026-10-30). NCSC Switzerland's advisory 13120 of 2026-10-29 rates exploitation unknown with vendor patches available and names MPTCP listeners as the target of the known exploits (NCSC Switzerland, 2026-10-29). Fortinet's advisory is unchanged: still investigating, with no fixed build, and Known Exploited: No (Fortinet, 2026-11-02).

Builds on: Public root exploit for a Linux page-cache write past the Dirty Frag fix; AlmaLinux kernels…

vulnerability31 Oct 03:48Zmulti-sourceOpen finding →
Sources: Linux kernel CVE team (linux-cve-announce) · Anthropic Frontier Red Team · Go team (golang-announce) · CIQ (Rocky Linux mitigation article) · Canonical (Ubuntu security tracker) · Debian Security Tracker · Red Hat (CVE page) · NCSC-NL (NCSC-2026-0461) · BleepingComputer · CIQ (Rocky Linux mitigation article, patched kernels table) · CIQ (Rocky Linux mitigation article, patched kernels table as of 2026-11-01) · AWS (Security Bulletin 2026-160-AWS, published 2026-10-30, updated 2026-11-02) · CloudLinux (status post published 2026-10-30, updated 2026-11-02) · Fortinet PSIRT (FG-IR-26-188) · Akamai Security Intelligence Group · Citrix (security bulletin CTX697256) · WatchGuard PSIRT (WGSA-2026-0033) · MikroTik (RouterOS 7.25.1 changelog) · MikroTik (RouterOS 7.24.6 changelog) · XCP-ng (security update post) · Vates (advisory VSA-2026-056) · NCSC Switzerland (Security Hub advisory 13120) · Canonical (Ubuntu security tracker, last updated 2026-11-04)

Co-occurring entities

Derived: referenced by the same focused operational entries (weekly summaries and report roundups don't count); ×N counts the shared entries.

Where this entity is cited

  • Vulns1

Source distribution

  • upgrade.mikrotik.com2 (10%)
  • access.redhat.com1 (5%)
  • advisories.ncsc.nl1 (5%)
  • akamai.com1 (5%)
  • anthropic.com1 (5%)
  • aws.amazon.com1 (5%)
  • bleepingcomputer.com1 (5%)
  • blog.cloudlinux.com1 (5%)
  • other11 (55%)
All cited sources (20)