Cardano stake pools hit by critical Linux flaw, delegated ADA stay safe

Intersect, the governance body behind Cardano, asked stake pool operators at the end of October to move their servers to a new Linux kernel. The request covers both types of machine in a pool: the block producer and the relays that connect it to the network. What is confirmed: the vulnerability is tracked as CVE-2026-98432, Ubuntu's security tracker lists it with a CVSS 3 score of 9.8 out of 10 and a "Critical" rating, and nobody has yet counted how many of the 2,884 registered Cardano pools run a vulnerable kernel.