A critical security vulnerability has been discovered in the Linux kernel: CVE-2026-98432 (CVSS 9.8). The vulnerability is located in the TCP stack and can be exploited remotely. FileCap on-prem version 5, which runs on Debian 12, is also vulnerable. Debian has fixed the vulnerability in kernel 6.1.190-1 (October 16, 2026).
For more technical details about the vulnerability, see the NVD entry for CVE-2026-98432.
What does this mean for you?
Are you using FileCap on-prem version 5? If so, whether you need to take any action depends on your settings.
Automatic security updates are enabled: you don't need to do anything. If you want to be sure, check the kernel version as described below.
Automatic security updates are turned off: enable them via option 6, "Security update settings, " in the FileCap Console Menu. If you don't do this, check yourself to make sure you're running the correct kernel and update FileCap if necessary.
Check the kernel version
- Log in to the FileCap server via SSH and select option 8, "Admin prompt," from the FileCap Console Menu.
- Enter the command
uname -vout. - Do you see version 6.1.190-1 (2026-10-16) or newer? If so, you're protected. If you see an older version, update FileCap.
Update FileCap
- Log in to the FileCap server via SSH. The FileCap Console Menu appears.
- Select option 9. Update FileCap and press Enter.
- Wait until the updater finishes. The message " filecap was already not on hold " is normal. If FileCap itself is also being updated, the server will restart automatically, and you can proceed to step 5.
- If you return to the FileCap Console Menu after the update , select option 10, "Reboot system," and press Enter. The new kernel will not be active until after the system restarts.
- After the restart, log in again via SSH and select the option 8. Admin prompt and food
uname -vIf you see 6.1.190-1 (2026-10-16) or later, the server is protected.
Frequently Asked Questions
What is CVE-2026-98432?
CVE-2026-98432 is a critical security vulnerability in the Linux kernel's TCP stack, with a CVSS score of 9.8. The vulnerability can be exploited remotely. Debian has fixed it in kernel 6.1.190-1 (October 16, 2026).
Is FileCap vulnerable to CVE-2026-98432?
FileCap on-prem version 5 runs on Debian 12 and is vulnerable as long as the server is running a kernel older than 6.1.190-1 (2026-10-16). The vulnerability is resolved after updating and restarting the server.
As a FileCap on-premises administrator, do I need to do anything?
If automatic security updates are enabled, you don't need to do anything. If they are disabled, enable them using option 6 in the FileCap Console Menu, or update FileCap manually using option 9 and restart the server using option 10.
Questions?
Do you have questions about this security update or need help updating FileCap? Please contact us at sales@filecap.com.
