Redpanda incident

CVE-2026-98432 Investigation

Resolved after 7 hours 33 minutes, on October 29, 2026.

resolved Oct 29, 2026, 11:41 PM UTC

Please see our Technical Service Bulletin for further information, and future updates. https://knowledgebase.redpanda.com/articles/5048937749-guidance-for-linux-kernel-ipv4-tcp-use-after-free-cve-2026-98432

Started
Oct 29, 2026, 04:07 PM UTC
Resolved
Oct 29, 2026, 11:41 PM UTC
Duration
7h 33m
Detected by Pingoru
Oct 29, 2026, 04:07 PM UTC

Update timeline

  1. investigating Oct 29, 2026, 04:07 PM UTC

    Redpanda is aware of CVE-2026-98432: https://nvd.nist.gov/vuln/detail/cve-2026-98432 and we have engineering teams assessing any potential impact. Please watch this space for updates.

  2. monitoring Oct 29, 2026, 08:20 PM UTC

    Redpanda Engineering has reviewed any potential impact to our cloud products and see no viable attack surface. Out of caution we will update to patched Kernel versions as they are released. For Self Hosted Clusters we will be sending communication via TSB with guidance for system management.

  3. resolved Oct 29, 2026, 11:41 PM UTC

    Please see our Technical Service Bulletin for further information, and future updates. https://knowledgebase.redpanda.com/articles/5048937749-guidance-for-linux-kernel-ipv4-tcp-use-after-free-cve-2026-98432

Your product runs on more than Redpanda

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →