RunCloud incident
Critical Linux Kernel Vulnerability - CVE-2026-98432 (CVSS 9.8)
Ongoing since 03:31 PM UTC, affecting section-361211 (General Announcements).
We are monitoring CVE-2026-98432, a critical Linux kernel vulnerability with a CVSS score of 9.8 (Critical). As per the latest Ubuntu Security Advisory, Ubuntu releases from 16.04 LTS (Xenial) onwards are listed as vulnerable. Security fixes are currently marked as Work in Progress (WIP) for Ubuntu 22.04 LTS and newer releases, while Ubuntu 16.04 LTS, 18.04 LTS, and 20.04 LTS remain listed as vulnerable. Recommended Precautions While awaiting official Ubuntu security updates, we recommend: Create a full server snapshot at your cloud provider level, using your cloud provider's snapshot functionality. This provides a recovery point to restore your server to its previous state if issues occur after applying system updates. Enable automatic security updates through Ubuntu Unattended Upgrades to receive official security patches when available. This can be configured through the Server Settings page in your RunCloud dashboard. Maintain up-to-date backups of your web applications, databases, and other critical server data, separately from the server snapshot. Apply official kernel security updates once available. A server reboot may be required for the updated kernel to take effect. Further Updates RunCloud will continue to track Ubuntu's security advisories and the availability of official patches. We will provide further updates as the situation progresses. Reference: https://ubuntu.com/security/CVE-2026-98432
Affected components
Update timeline
- investigating Oct 29, 2026, 03:31 PM UTC
We are monitoring CVE-2026-98432, a critical Linux kernel vulnerability with a CVSS score of 9.8 (Critical). As per the latest Ubuntu Security Advisory, Ubuntu releases from 16.04 LTS (Xenial) onwards are listed as vulnerable. Security fixes are currently marked as Work in Progress (WIP) for Ubuntu 22.04 LTS and newer releases, while Ubuntu 16.04 LTS, 18.04 LTS, and 20.04 LTS remain listed as vulnerable. Recommended Precautions While awaiting official Ubuntu security updates, we recommend: Create a full server snapshot at your cloud provider level, using your cloud provider's snapshot functionality. This provides a recovery point to restore your server to its previous state if issues occur after applying system updates. Enable automatic security updates through Ubuntu Unattended Upgrades to receive official security patches when available. This can be configured through the Server Settings page in your RunCloud dashboard. Maintain up-to-date backups of your web applications, databases, and other critical server data, separately from the server snapshot. Apply official kernel security updates once available. A server reboot may be required for the updated kernel to take effect. Further Updates RunCloud will continue to track Ubuntu's security advisories and the availability of official patches. We will provide further updates as the situation progresses. Reference: https://ubuntu.com/security/CVE-2026-98432
Your product runs on more than RunCloud
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services