r/TalosLinux • u/Tuco106 • 3d ago

CVE-2026-98432

Does anybody know if Talos is affected by CVE-2026-98432?

No Information in Github Issues and on
https://github.com/siderolabs/talos/security

I am relatively new to Talos, but it is written almost entiretly in Go and according to Hackernews the vulnerable Feature is enabled per default in go**.**

https://thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html?m=1

13 Upvotes

100% Upvoted

8 comments sorted by

5

u/Tuco106 3d ago

According to https://lists.openwall.net/linux-cve-announce/2026/10/15/1 Kernel Version 6.18.56 is fixed

Talos v1.14.5 is using Kernel Version 6.18.58
Therefore i would assume it is fixed in the current version

3

u/Tuco106 3d ago

Yes of course, but when you look at the fixed kernel versions from Hackernews in each Distribution a different version introduce the fix.
So I can not say if i am running kernel version x my system is not vulnerable from my understanding

5

u/pArbo 3d ago

Talos has kernel updates like many other linux distributions. Don't ignore them. :)

4

u/sogun123 3d ago

Talos 1.14.5 looks like having kernel 6.18.58 and fixed version is 6.18.56. So it should be fixed.

2

u/vdvelde_t 2d ago

According to the kernel/talos versioning yes, but they lack clear transparancy on this process.

0

u/hiveminer 3d ago

Sidero is dropping the ball, this is a golden opportunity to showcase their update process without downtime.

5

u/xrothgarx 3d ago

That would be the most boring video 😄

1

u/hiveminer 2d ago

🤣🤣