Don't want to trade it yourself?
Our desk runs DEX portfolios on profit share.
DePIN project IoTeX warned of Linux kernel vulnerability CVE-2026-98432, with a CVSS score of 9.8, that could allow a remote attacker to gain root privileges over TCP, and recommended patching by Nov. 2 for anyone running delegate nodes on affected kernels.
IoTeX said Go 1.24 and later enable Multipath TCP (MPTCP) by default on listeners, meaning iotex-core’s P2P port 4689 can receive connections over an MPTCP path usable in the attack without any separate configuration. For Debian 12 and 13, the recommended response is to upgrade the kernel to 6.1.190 or later and 6.12.113 or later, respectively, and then reboot. For Ubuntu, IoTeX said no fixed kernel is yet available for any release, and presented a firewall rule blocking IPv4 packets containing the IP options required for the attack as a mitigation that can be applied without a reboot.