Veeam patches Linux kernel flaw CVE-2026-98432 in 13.1 appliances
No newer report adds facts about CVE-2026-98432; the November 9 Veeam advisory and November 6 Ubuntu status remain current.
Veeam has a patched kernel for critical CVE-2026-98432 in 13.1 appliances; Ubuntu’s fix was still unfinished as of November 6.
Veeam warned that Linux kernel flaw CVE-2026-98432, scored 9.8, can cause denial of service or memory corruption in backup and recovery products. Cyber Security News describes a use-after-free; BleepingComputer places the flaw in IPv4 TCP networking code. It affects Veeam Software Appliance 13.1 and Infrastructure Appliance 13.1, including proxies, hardened repositories, mount servers, gateways, Cloud Connect components, and hypervisor plug-in workers. Windows Backup & Replication 13.1 and 12.3 deployments that use Linux helper appliances also need kernel updates. A patched kernel, 5.14.0-570.60.1+27.2.el9_6_ciq, has been available since November 2 through Veeam Updater; the advisory does not report active exploitation. As of November 6, an Ubuntu update remained work in progress, with mitigation listed but no fixed release.
- CVE-2026-98432 is rated 9.8 and can cause denial of service or memory corruption.
- Patched kernel 5.14.0-570.60.1+27.2.el9_6_ciq has been available since November 2.
- Veeam Software Appliance 13.1 and Infrastructure Appliance 13.1 are affected.
- Windows helper-appliance deployments need Backup & Replication 13.1.2.57.
- Veeam’s advisory does not report active exploitation.
- Ubuntu’s fix was still work in progress on November 6, with mitigation listed.
Timeline
dated events in the reporting · oldest first- Nov 2, 2026Patched kernel package made available via Veeam Updater. · Cyber Security News
- Nov 6, 2026Ubuntu fix still work in progress; mitigation listed. · Hacker News
What each outlet adds
beyond the shared facts- Cyber Security NewsUse-after-free, affected Veeam components, kernel package, and no reported exploitation.
- BleepingComputerPlaces CVE-2026-98432 in the Linux kernel IPv4 TCP code.
- Hacker NewsUbuntu entry still unfinished on November 6 despite listed mitigation.
Coverage
oldest first · one row per article · UTC- · 6d ago
Cyber Security NewsFirst report
Citrix XenServer Vulnerability Could Allow Host Compromise
CVE-2026-98432 in XenServer 8.4 and 9 requires management network access for unauthenticated host takeover.
- · 5d ago
Hacker News · security
Ubuntu update delayed for critical CVE-2026-98432
Ubuntu has left critical CVE-2026-98432 unpatched for nearly a week despite a 9.8 severity rating and available mitigation.
- · 5d ago
BleepingComputer
Veeam Software Appliance VMs fail to boot on AMD EPYC hosts
Veeam Software Appliance VMs running on certain AMD EPYC processors intermittently fail to boot after jitterentropy health test failure in FIPS mode.
- · 2d ago
Veeam warns critical Linux kernel flaw could crash backup appliances
Veeam identifies use-after-free in Linux kernel affecting backup appliances; patched kernel available for 13.1 versions.
- · 7h ago
SecurityWeek
Citrix and Ivanti patch 19 flaws, including critical RCE bugs
Ivanti reports no evidence of exploitation; CSA 5.0.8.1 and Endpoint Manager 2024 SU8 fix the two critical defects.
Vulnerabilities in this story
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-102703 | Frame/grant ref mixing in Xen grant copy cache | 4.4 | — | ||
| CVE-2026-102705 | — | — | — | ||
| CVE-2026-105425 | OS command injection in Ivanti Sentry and EPMM (admin) | 7.2 | — | ||
| CVE-2026-121653 | Unauthenticated SQL injection to RCE in Ivanti Endpoint Manager | 9.8 | — | ||
| CVE-2026-121683 | Missing authentication in Ivanti Cloud Services Application 5.0.8 | 9.4 | — | ||
| CVE-2026-98432 | Use-after-free in Linux kernel IPv4 TCP options | 9.8 | <1% | PoC ×25 |