We would like to inform you that IndicHosts has successfully completed emergency security maintenance across our server and network infrastructure to address a recently disclosed critical Linux kernel vulnerability, identified as CVE-2026-98432.
All affected systems under our management have now been secured against this vulnerability, and the required security updates have been completed.
CVE-2026-98432 is a critical security vulnerability affecting the Linux operating system kernel, specifically its IPv4 TCP networking subsystem.
The vulnerability involves a memory-management flaw that could potentially allow an unauthenticated remote attacker to:
Security Severity: CRITICAL
CVSS Score: 9.8 out of 10
This is among the highest severity classifications assigned to cybersecurity vulnerabilities. Of particular concern is that exploitation may be possible remotely, without requiring valid login credentials or any action by the server’s users.
Unlike ordinary software vulnerabilities, this security flaw affects the Linux kernel itself — the core component responsible for managing operating system resources, memory, and network communications.
Given its critical severity and the potential for remote exploitation, delaying remediation until our next scheduled maintenance window would have unnecessarily exposed customer infrastructure to security risks.
Our security and infrastructure teams therefore initiated emergency maintenance at short notice.
Protecting customer data, server integrity, and the security of our hosting environment took priority over postponing essential maintenance.
Our infrastructure teams undertook the following measures:
Because kernel security updates often require a complete system restart, several servers had to undergo full reboots rather than ordinary service restarts.
These reboots were necessary to ensure that the vulnerable kernel code was no longer running.
We recognize that customers normally expect advance notification of maintenance activities, particularly those requiring server restarts. However, vulnerabilities of this severity demand an immediate response. Providing the usual advance notice would have delayed the deployment of essential security protections. We therefore made the decision to proceed with emergency maintenance to minimize the period of potential exposure.
We appreciate your understanding of this necessary precaution.
The emergency security maintenance has been completed successfully.
All affected systems under our management have received the necessary remediation, and the infrastructure has been returned to normal operation.
Our teams will continue monitoring security advisories and applying preventive measures as part of our ongoing infrastructure security programme.
At IndicHosts, protecting our customers’ websites, applications, email services, and hosted data remains a fundamental responsibility.
We continuously monitor emerging security threats and take proactive action when vulnerabilities pose a significant risk to our infrastructure.
While emergency maintenance can occasionally require short-notice interruptions, we believe that promptly addressing critical security threats is essential to maintaining a secure and dependable hosting environment.
Additional Technical Information:
Vulnerability: CVE-2026-98432
Severity: Critical (CVSS 9.8/10)
Affected Component: Linux Kernel – IPv4 TCP Networking
Maintenance Status: Completed
Security Remediation: Completed
Official Vulnerability Reference:
https://nvd.nist.gov/vuln/detail/CVE-2026-98432