[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbc_Ns7QPLvBOUYzjZdn0MyemQx2bD0Hfk8RBIDrzhe4":3},{"article":4,"iocs":45,"watch_terms":50,"solutions":51,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"41d430b8-4d10-43bb-a14c-f966317f2043","Veeam Warns Critical 9.8 Linux Kernel Flaw Could Crash Backup Appliances and Disrupt Recovery Operations","veeam-warns-critical-9-8-linux-kernel-flaw-could-crash-backup-appliances-and-dis-fd8317","Veeam warned that a critical Linux kernel flaw with a CVSS score of 9.8, could cause denial of service or memory corruption across backup and recovery products. Veeam’s November 6 impact statement identified a Linux kernel use-after-free vulnerability (CVE-2026-98432) in TCP\u002FIPv4 connection setup and outlined update paths for affected systems. Its security advisory does not […] The post Veeam Warns Critical 9.8 Linux Kernel Flaw Could Crash Backup Appliances and Disrupt Recovery Operations appeared first on Cyber Security News.","Veeam has issued a warning about a critical Linux kernel vulnerability, CVE-2026-98432, with a CVSS score of 9.8. This use-after-free flaw in TCP\u002FIPv4 connection setup could lead to denial of service or memory corruption, potentially disrupting backup and recovery operations. While active exploitation is not reported, affected Veeam products include Software Appliance 13.1, Infrastructure Appliance 13.1, and various helper appliances used in Windows-based installations.","Veeam warns of critical Linux kernel flaw (CVE-2026-98432) impacting backup appliances.","https:\u002F\u002Fcybersecuritynews.com\u002Fveeam-warns-critical-linux-kernel-flaw\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002FVeeam-Warns-Critical-9.8-Linux-Kernel-Flaw-Could-Crash-Backup-Appliances-and-Disrupt-Recovery-Operations.webp","2026-11-09T07:48:15+00:00","2026-11-09T08:00:20.592405+00:00",8,[17,20,23,25],{"name":18,"type":19},"Veeam","vendor",{"name":21,"type":22},"Veeam Software Appliance","product",{"name":24,"type":22},"Veeam Infrastructure Appliance",{"name":26,"type":22},"Veeam Backup & Replication","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":27,"icon":29,"name":30,"slug":31},null,"Vulnerabilities","vulnerabilities",[33,38,40],{"category":34},{"id":35,"icon":29,"name":36,"slug":37},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":39},{"id":27,"icon":29,"name":30,"slug":31},{"category":41},{"id":42,"icon":29,"name":43,"slug":44},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[46],{"type":47,"value":48,"context":49},"cve","CVE-2026-98432","Critical Linux kernel use-after-free vulnerability",[18,21,24],{"controls":52,"vendors":138},[53,82,110],{"slug":54,"name":55,"problem":56,"products":57},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":83,"name":84,"problem":85,"products":86},"patch-management","Automated patch management","Known holes get closed in days, not months.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":83,"product_name":107,"url":108,"description":109},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":111,"name":112,"problem":113,"products":114},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[115,123,131],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"commvault","Commvault","\u002Fvendor-logos\u002Fcommvault.png","commvault-cloud","Commvault Cloud","https:\u002F\u002Fwww.commvault.com\u002Fplatform","Backup and recovery platform with immutable storage and recovery testing.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"cohesity","Cohesity","\u002Fvendor-logos\u002Fcohesity.png","dataprotect","Cohesity DataProtect","https:\u002F\u002Fwww.cohesity.com\u002Fplatform\u002Fdataprotect\u002F","Backup and recovery with immutable snapshots, on premises or as a service.",{"vendor_slug":132,"vendor_name":18,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",[139],{"slug":132,"name":18,"logo_path":133,"roles":140},[141],"affected",{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":154},"critical-linux-kernel-flaw-threatens-veeam-backup-appliances","Critical Linux Kernel Flaw Threatens Veeam Backup Appliances","A critical use-after-free vulnerability (CVE-2026-98432, CVSS 9.8) in the Linux kernel's TCP\u002FIPv4 stack puts Veeam backup and recovery appliances at risk of denial of service or memory corruption. This matters because backup infrastructure is a last line of defence — if recovery systems are disrupted or destroyed, organisations lose the ability to restore operations after any incident, ransomware attack included. The flaw affects multiple Veeam appliance variants, meaning the attack surface is broad across both software and infrastructure deployments. Even without confirmed active exploitation, a CVSS score of 9.8 demands immediate remediation priority, as threat actors routinely weaponise high-severity kernel flaws once public details are available.",[147,148,149,150,151,152,153],"CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIS2 Article 21(2)(b)","DORA Article 9",{"DORA Article 9":155,"NIS2 Article 21(2)(b)":156,"NIST SP 800-53 SI-2: Flaw Remediation":157,"OWASP A06:2021 Vulnerable and Outdated Components":158,"CIS Control 7: Continuous Vulnerability Management":159,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":160,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":161},"DORA requires financial entities to protect ICT systems supporting critical functions, including backup and recovery infrastructure, making remediation of a CVSS 9.8 flaw on these systems a regulatory imperative.","NIS2 mandates incident handling and business continuity measures; disruption of backup appliances through this vulnerability directly undermines recovery capability, making patching a compliance obligation for essential and important entities.","SI-2 requires organisations to identify, report, and correct information system flaws on a defined schedule; applying this to backup appliances would mandate timely patching of this CVSS 9.8 kernel vulnerability.","The underlying Linux kernel shipped with Veeam appliances constitutes a third-party component; A06 highlights the risk of running unpatched components and the need for continuous tracking and upgrading.","Regular authenticated scanning and a defined remediation timeline for critical vulnerabilities would have flagged CVE-2026-98432 on Veeam appliances and driven patching before exploitation became feasible.","A.8.8 requires timely identification and remediation of technical vulnerabilities in information systems, directly covering the need to patch this critical Linux kernel flaw in backup appliances.","Restricting network-level access to backup appliances through segmentation and access controls limits the network-exposed TCP\u002FIPv4 attack surface that this kernel vulnerability relies upon."]