ARKANSAS-NODE's Posts

CVE-2026-98432 is a critical linux kernel vuln.
If you are on a vulnerable kernel version and have something called MPTCP enabled (probably the default) you might be vulnerable to haivng your server taken over by anyone who exploits this. If you do not have kernel updates available to fix this, you can mitigate this by disabling MPTCP

to check if it is enabled: sudo sysctl net.mptcp.enabled
If it returns 1, you are vulnerable.
To disable it: sudo sysctl -w net.mptcp.enabled=0

Make sure this disable persists across reboots.

DO THIS NOW IF YOU RUN A NODE

My node is off at the moment as I compile then install the updated version of Core.
It will then come back online sometime today when it is ready.

Core Lightning is continuously being security hardened resulting in security patches being applied frequently in the past weeks. Anytime a new version gets released contianing security patches the vulnerabilities are then known without needing the use of AI. Anyone running a version behind the latest version is vulnerable and probably will be targetted. It would be a good idea to update your lightning node now. A new version of Core Lightning was released yesterday Oct 07 2026 

As the team behind CLN continues to security harden Core Lightning, more and more security patches get released in version updates.Today version 26.06.9 was released containing security fixes, and CLN operators are highly recommended to update as soon as possible. Since ARKANSAS-NODE is running CLN, I am shutting it down and will compile CLN and will turn it back on once it has been updated.

I am shutting down ARKANSAS-NODE now, compiling the latest version of CLN after verifying signatures of the release or git commits, then will bring up lightning again later today.