[REVISION HISTORY]
Critical cybersecurity vulnerabilities in server software
1 recorded revision of this situation.
What changed
2026-10-30 02:51 UTC → 2026-10-30 04:06 UTC ·
added
removed
In late October 2026, two major security vulnerabilities were identified in core server infrastructure components. First, researchers discovered a critical flaw in the TianoCore EDK II open-source codebase, tracked as CVE-2026-97631. This vulnerability, which carries a CVSS score of 9.5/10, involves a buffer overflow in the PXE-Base Code driver. Because the exploit occurs during the DXE phase of the boot process, it can bypass security mechanisms like Secure Boot. The flaw primarily impacts servers and data center infrastructure that utilize the Preboot Execution Environment (PXE) to boot over a network. Separately, a critical Linux kernel vulnerability, CVE-2026-98432, was disclosed. This flaw involves a race condition during the assembly of SYNACK responses to retransmitted SYN packets, which can lead to a use-after-free error. On October 27, it was demonstrated that this vulnerability could allow remote command execution with root privileges on servers running Multipath TCP (MPTCP). New details released on October 30 indicate the vulnerability carries a severity score of 9.8/10. On October 27, Anthropic demonstrated a successful exploit using AI-generated code that allowed for remote command execution without authentication or user interaction. While the CVE team announced the issue on October 15 and patches have been integrated into stable kernel versions, remediation progress varies by distribution. Amazon Linux 2023 has released updates for kernels 6.18 and 6.12, while some Ubuntu versions were reported as still being in the process of being patched as of late October. Mitigation efforts include kernel updates from providers like Amazon and the implementation of firewall rules by organizations such as Calil to block specific TCP packets. packets with IP options.
Versions
- 2026-10-30 04:06 UTC Critical cybersecurity vulnerabilities in server software
- 2026-10-30 02:51 UTC Critical cybersecurity vulnerabilities in server software
Select a version to see what changed compared to the one before it.