Hi everyone, I saw that the kernel has been updated to 6.12.113 in 25.10.9 which contains the fix for CVE-2026-98432. Do we have an ETA for that version? Thanks!

They get announced and released when they are ready and pass all QC. There is no ETA or planned dates, other than that.

Where did you see that kernel update? If you have a link to the changelog or commit, that would help others verify whether the fix is included.

There is a JIRA ticket that comes up with the CVE but it shows 25.10.8 as Fix version https://ixsystems.atlassian.net/browse/NAS-144791

Anthropic demonstrated a practical, unauthenticated remote root exploit (Oct 27): ~53 min to root via CVE-2026-98432 which in the meantime has a score of 9.8. The chain requires an MPTCP listener. TrueNAS Status: On 25.10.7, sysctl net.mptcp.enabled returns 1 by default. Patch: Fixed in Linux 6.12…

Are there any plans to update 25.04? It uses 6.12.15.

I would say no. That version is no longer listed on the Software Status webpage. Advice would be to upgrade and stay on versions on that page. [image] TrueNAS Software Status Find the right TrueNAS version for your use case with current deployment recommendations, release schedules, a…

But that’s a security update, not a feature. Many users still stay on that version due to removed functionality in 25.10+. It’s not that old - only a year and a half.

The last update was 25.04.2.6 release about October 30th, 2025. (going by the download webpage). That version has not seen any updates since then. There have been numerous security updates with 25.10.5, 25.10.6 and 25.10.7. I tried finding a thread posting where users were told to update from 25.…

[image] SmallBarky: I tried finding a thread posting where users were told to update from 25..04 to get critical security update to 25.10, but I can’t see where it was. @SmallBarky , it was CVE-2026-46243 .

Cve-2026-98432

TrueNAS General

letic November 2, 2026, 9:13pm 3

Hey @lawlest,

I’m curious… where did you see that ? The security tracker doesn’t even show that CVE: TrueNAS | Enterprise Security Responses |

Thanks

Topic		Replies	Views
25.10.3.2 and other security fixes TrueNAS General Security	6	276	June 5, 2026
TrueNAS 25.10.3.1 is Now Available Announcements	23	2746	May 25, 2026
TrueNAS 25.10.7 is Now Available Announcements	62	4083	October 19, 2026
TrueNAS CORE 13.0-U6.2 is Now Available! Announcements	39	5156	February 5, 2025
TrueNAS 25.10.5 is Now Available Announcements	20	2317	August 15, 2026

Cve-2026-98432

Related topics