TCP/IP Stack Bug CVSS 9,8

The crashes are getting more and more frequent.
Do you already have a plan to sort this out, or do we have to wait for Debian, or does this not affect DietPi?

Sorry, it’s only available in German, unfortunately.

https://www.heise.de/news/Erneut-kritischer-Bug-in-Linux-TCP-IP-aufgedeckt-Updates-in-Arbeit-11506050.html

Thanks on the heads up.

We are already on it. Luckily, the patch for older Linux versions is simple, so we can fix it for Odroid C1, XU4, and Rockchip vendor kernel as well.

For x86_64 (Debian kernel), apt upgrade fixed it since a few days already.

And for RPi device the fix would need to be provided by RPi developer. We can fix it for our builds only

So there should also be solutions for the Raspberry Pi, OrangePi and NanoPi running Dietpi OS?

Everything will be fixable via apt upgrade in an hour or so, except Raspberry Pi. We use the Raspberry Pi OS kernel/firmware repository, so there is nothing we can do about it. But the community is aware of it already, for sure … here it is: https://forums.raspberrypi.com/viewtopic.php?t=401496
So the RPi fix is merged already, but packaging still outstanding.

As said we can fix it for kernel we build, Debian fixed it on their side already, RPI developer are on it as well. But there is a sub set of SBC using vendor kernel where we can’t do anything.

Thanks @MichaIng & @Joulinar

We can. The patch is 2 lines only. I am currently applying it for the older/vendor kernel cases: Odroid C1, Odroid XU4, and Rockchip vendor Linux 6.1. Ah wait, I nearly missed the Xunlong A733 Linux 6.6 kernel, so that one as well.

EDIT: And our RISC-V builds.

I thought vendor kernel is out of scope for us.

We have an Armbian fork, so we can apply patches our end.

Done with: security: fix CVE-2026-98432 in vulnerable kernel builds · MichaIng/build@d92ab79 · GitHub
Builds running: Armbian · MichaIng/DietPi@24e8215 · GitHub

Odroid XU4 needs a rebuild only, since the last kernel raise patch by Armbian from 2 weeks ago contains the fix already: build/patch/kernel/archive/odroidxu4-6.6/patch-6.6.158-159.patch at c88e0eb832398aa55eec2df696dfea958de2b1fd · armbian/build · GitHub