Skip to content

Back to the catalog

ClioBitcoinBank 🏴‍☠️ (@ClioBitcoinBank) on X
x.comadvisory

ClioBitcoinBank 🏴‍☠️ (@ClioBitcoinBank) on X

lnd v0.20.7 and v0.21.6 are Lightning Network Daemon releases announced by Clio Bitcoin Bank. They include a Go-specific mitigation, with the MPTCP flag turned off, for CVE-2026-98432, a use-after-free in the Linux kernel's IPv4 TCP code. The post recommends all users update. It gives no exploit or impact detail.

TL;DR Announces lnd v0.20.7 and v0.21.6, which disable Go's MPTCP flag to mitigate a Linux kernel TCP use-after-free.
Open original ↗

Organisations named here

  • Clio Bitcoin Bank

CVEs named here

  • CVE-2026-98432

Technologies named here

  • Linux kernel
  • Go
  • Bitcoin
  • lnd
  • MPTCP

Techniques named here

  • Use-after-free

Concepts named here

  • MPTCP (Multipath TCP)
  • Use-after-free

Related in Cloud & Infra