Ubuntu-based Solana validators urged to block traffic while kernel fix waits

On Nov. 2, Anza sent an “Action Required” alert to Solana mainnet-beta validators regarding a critical vulnerability in the Linux kernel that has yet to be patched by Ubuntu. The Solana developer quoted a thread from Tim Garcia, the Solana Foundation’s validator relations lead, telling Ubuntu operators to filter traffic until a fix arrives. Garcia wants Multipath TCP and socket migration switched off In Garcia’s thread , he lists three changes to make until an Ubuntu package is available. Operators should employ nftables to drop inbound TCP packets with IPv4 options. He advised them to disable Multipath TCP with net.mptcp.enabled=0. net.ipv4.tcp_migrate_req=0 disables migration of TCP request sockets. Filtering shrinks exposure but does not fully stop exploitation, Red Hat warned. The notice is for validators running Ubuntu.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Cryptopolitan.