Matt Corallo Flags Critical Linux Kernel Flaw; Lightning Labs Ships LND Mitigation

Bitcoin Core and Lightning developer Matt Corallo recently identified a severe Linux kernel vulnerability, CVE-2026-98432, on October 30. This flaw, a use-after-free bug within the IPv4 TCP handshake code, received a critical CVSS score of 9.8. Researchers from Anthropic’s Frontier Red Team successfully demonstrated a remote root exploit against systems configured with a Multipath TCP listener, highlighting the gravity of the issue. In response to this critical finding, Lightning Labs, a key developer in the Bitcoin Lightning Network ecosystem, promptly released a mitigation for its Lightning Network Daemon (LND) to protect its users and infrastructure from this potential threat. The original report was published in Bitcoin Magazine by Juan Galt.