rewindex

ChangesLinode (Akamai)Customer Security Advisory: CVE-2026-98432

Linode (Akamai): Incident updated: Customer Security Advisory: CVE-2026-98432

Incident updateDownplayed?Normal progress (rule, 100%)Changed status.linode.com (opens in new tab)
Summary

Summary pending. The diff below shows exactly what changed.

Downplayed?

Vendor rated this none; a Hacker News thread about it drew 197 points and 109 comments. Linode Security Incident (opens in new tab)

This is an automated signal, not a finding. It compares the vendor’s own impact rating with public Hacker News activity (points, comments in the first hour, distinct commenters, first-hand symptom reports). HN users skew technical, so the impact on any one customer may differ. How this is computed.

Incident page: the full timeline of updates

What changed

Struck in red is what Linode (Akamai) removed; blue is what they added. Muted text is unchanged context.

AddedUpdateinvestigating#1
Before: not present
After: While we continue to deploy kernel patches across our infrastructure, we have also deployed network rules that drop IPv4 packets with optional headers on public and VPC interfaces. This eliminates the immediate attack vector and protects our infrastructure as well as customer workloads without impacting performance or functionality, and notably is not limited to only focusing on the MPTCP exploit, but the underlying vulnerability. We continue to track upstream OS provider security releases and will make updated distributions available to customers as they are released. Customers using the Linode provided kernel are likewise advised to deploy the latest version when it becomes available as well.

Compared with the previous archived version of this incident (10 to 30-minute polling). View the live incident (opens in new tab).

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

History of this incident

Monday, November 9

1 incident change

Monday, November 2

1 rewrite, 1 incident change

Saturday, October 31

1 incident change

Friday, October 30

1 incident change

Cite this

Incident updated: Customer Security Advisory: CVE-2026-98432 on Linode (Akamai)’s status page, changed 2026-11-02 11:03 UTC (change 3 of 5).

Title
Incident updated: Customer Security Advisory: CVE-2026-98432
Vendor
Linode (Akamai)
Date
URL
https://rewindex.com/change/r097839412d4129

All Linode (Akamai) changesLinode (Akamai) profileMarkdownJSON