# TCP/IP Stack Bug CVSS 9,8 **URL:** \ **Category:** Troubleshooting\ **Created:** [30 October 2026 18:22 UTC](https://dietpi.com/forum/t/tcp-ip-stack-bug-cvss-9-8/25542 "2026-10-30T18:22:19Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![Falconcrest](https://dietpi.com/forum/user_avatar/dietpi.com/falconcrest/32/97_2.png) [@Falconcrest](https://dietpi.com/forum/u/Falconcrest)\ **Post date:** [30 October 2026 18:22 UTC](https://dietpi.com/forum/t/tcp-ip-stack-bug-cvss-9-8/25542/1 "2026-10-30T18:22:19Z")
The crashes are getting more and more frequent. Do you already have a plan to sort this out, or do we have to wait for Debian, or does this not affect DietPi? Sorry, it’s only available in German, unfortunately. [https://www.heise.de/news/Erneut-kritischer-Bug-in-Linux-TCP-IP-aufgedeckt-Updates-in-Arbeit-11506050.html](https://www.heise.de/news/Erneut-kritischer-Bug-in-Linux-TCP-IP-aufgedeckt-Updates-in-Arbeit-11506050.html) ---
**Author:** ![MichaIng](https://dietpi.com/forum/user_avatar/dietpi.com/michaing/32/7_2.png) [@MichaIng](https://dietpi.com/forum/u/MichaIng)\ **Post date:** [30 October 2026 18:36 UTC](https://dietpi.com/forum/t/tcp-ip-stack-bug-cvss-9-8/25542/2 "2026-10-30T18:36:18Z")
Thanks on the heads up. We are already on it. Luckily, the patch for older Linux versions is simple, so we can fix it for Odroid C1, XU4, and Rockchip vendor kernel as well. For x86\_64 (Debian kernel), `apt upgrade` fixed it since a few days already. ---
**Author:** ![Joulinar](https://dietpi.com/forum/user_avatar/dietpi.com/joulinar/32/57_2.png) [@Joulinar](https://dietpi.com/forum/u/Joulinar)\ **Post date:** [30 October 2026 18:44 UTC](https://dietpi.com/forum/t/tcp-ip-stack-bug-cvss-9-8/25542/3 "2026-10-30T18:44:18Z")
And for RPi device the fix would need to be provided by RPi developer. We can fix it for our builds only ---
**Author:** ![Falconcrest](https://dietpi.com/forum/user_avatar/dietpi.com/falconcrest/32/97_2.png) [@Falconcrest](https://dietpi.com/forum/u/Falconcrest)\ **Post date:** [30 October 2026 18:47 UTC](https://dietpi.com/forum/t/tcp-ip-stack-bug-cvss-9-8/25542/4 "2026-10-30T18:47:56Z")
So there should also be solutions for the Raspberry Pi, OrangePi and NanoPi running Dietpi OS? ---
**Author:** ![MichaIng](https://dietpi.com/forum/user_avatar/dietpi.com/michaing/32/7_2.png) [@MichaIng](https://dietpi.com/forum/u/MichaIng)\ **Post date:** [30 October 2026 18:55 UTC](https://dietpi.com/forum/t/tcp-ip-stack-bug-cvss-9-8/25542/5 "2026-10-30T18:55:40Z")
Everything will be fixable via `apt upgrade` in an hour or so, except Raspberry Pi. We use the Raspberry Pi OS kernel/firmware repository, so there is nothing we can do about it. But the community is aware of it already, for sure … here it is: [https://forums.raspberrypi.com/viewtopic.php?t=401496](https://forums.raspberrypi.com/viewtopic.php?t=401496) So the RPi fix is merged already, but packaging still outstanding. ---
**Author:** ![Joulinar](https://dietpi.com/forum/user_avatar/dietpi.com/joulinar/32/57_2.png) [@Joulinar](https://dietpi.com/forum/u/Joulinar)\ **Post date:** [30 October 2026 18:58 UTC](https://dietpi.com/forum/t/tcp-ip-stack-bug-cvss-9-8/25542/6 "2026-10-30T18:58:06Z")
As said we can fix it for kernel we build, Debian fixed it on their side already, RPI developer are on it as well. But there is a sub set of SBC using vendor kernel where we can’t do anything. ---
**Author:** ![Falconcrest](https://dietpi.com/forum/user_avatar/dietpi.com/falconcrest/32/97_2.png) [@Falconcrest](https://dietpi.com/forum/u/Falconcrest)\ **Post date:** [30 October 2026 19:03 UTC](https://dietpi.com/forum/t/tcp-ip-stack-bug-cvss-9-8/25542/7 "2026-10-30T19:03:30Z")
Thanks @MichaIng & @Joulinar ---
**Author:** ![MichaIng](https://dietpi.com/forum/user_avatar/dietpi.com/michaing/32/7_2.png) [@MichaIng](https://dietpi.com/forum/u/MichaIng)\ **Post date:** [30 October 2026 19:16 UTC](https://dietpi.com/forum/t/tcp-ip-stack-bug-cvss-9-8/25542/8 "2026-10-30T19:16:02Z")
> [@Joulinar](#): > > But there is a sub set of SBC using vendor kernel where we can’t do anything. We can. The patch is 2 lines only. I am currently applying it for the older/vendor kernel cases: Odroid C1, Odroid XU4, and Rockchip vendor Linux 6.1. Ah wait, I nearly missed the Xunlong A733 Linux 6.6 kernel, so that one as well. EDIT: And our RISC-V builds. ---
**Author:** ![Joulinar](https://dietpi.com/forum/user_avatar/dietpi.com/joulinar/32/57_2.png) [@Joulinar](https://dietpi.com/forum/u/Joulinar)\ **Post date:** [30 October 2026 19:32 UTC](https://dietpi.com/forum/t/tcp-ip-stack-bug-cvss-9-8/25542/9 "2026-10-30T19:32:06Z")
I thought vendor kernel is out of scope for us. ---
**Author:** ![MichaIng](https://dietpi.com/forum/user_avatar/dietpi.com/michaing/32/7_2.png) [@MichaIng](https://dietpi.com/forum/u/MichaIng)\ **Post date:** [30 October 2026 19:33 UTC](https://dietpi.com/forum/t/tcp-ip-stack-bug-cvss-9-8/25542/10 "2026-10-30T19:33:37Z")
We have an Armbian fork, so we can apply patches our end. Done with: [security: fix CVE-2026-98432 in vulnerable kernel builds · MichaIng/build@d92ab79 · GitHub](https://github.com/MichaIng/build/commit/d92ab79) Builds running: [Armbian · MichaIng/DietPi@24e8215 · GitHub](https://github.com/MichaIng/DietPi/actions/runs/41115637867) Odroid XU4 needs a rebuild only, since the last kernel raise patch by Armbian from 2 weeks ago contains the fix already: [build/patch/kernel/archive/odroidxu4-6.6/patch-6.6.158-159.patch at c88e0eb832398aa55eec2df696dfea958de2b1fd · armbian/build · GitHub](https://github.com/armbian/build/blob/c88e0eb832398aa55eec2df696dfea958de2b1fd/patch/kernel/archive/odroidxu4-6.6/patch-6.6.158-159.patch#L74)