Redpanda: CVE-2026-98432 Investigation
Timeline of updates
- investigating
Redpanda is aware of CVE-2026-98432: https://nvd.nist.gov/vuln/detail/cve-2026-98432 (opens in new tab) and we have engineering teams assessing any potential impact. Please watch this space for updates.
- monitoring
Redpanda Engineering has reviewed any potential impact to our cloud products and see no viable attack surface. Out of caution we will update to patched Kernel versions as they are released.
For Self Hosted Clusters we will be sending communication via TSB with guidance for system management.
- resolved
Please see our Technical Service Bulletin for further information, and future updates.
https://knowledgebase.redpanda.com/articles/5048937749-guidance-for-linux-kernel-ipv4-tcp-use-after-free-cve-2026-98432 (opens in new tab)
Changes Rewindex caught on this incident
Archive proof
Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert.
How the archive is checked, and what it cannot prove.
Rewindex captured this after the last checkpoint; the next run () commits it.
Impact, status and times are the vendor’s own, as last archived. View on status.redpanda.com (opens in new tab).