M5 statement on Vulnerability Affecting Linux - CVE-2026-98432
On October 15, 2026, information was published regarding CVE-2026-98432, a use-after-free vulnerability in the Linux kernel's IPv4 TCP networking subsystem, rated critical.
M5 Technologies has reviewed the published information and assessed the potential impact on Mediatrix and Sentinel products.
Impact for Mediatrix customers
Mediatrix products are not impacted by CVE-2026-98432. The Linux kernel used in Mediatrix firmware is maintained by M5 Technologies and predates the change that introduced this vulnerability, so the affected code is not present. No action is required from Mediatrix customers.
Impact for Sentinel CS customers
The Sentinel CS SBC operates as a service on a Linux operating system. Customers using this application should continue to follow standard security best practices and ensure that the underlying host operating system remains up to date and protected against known vulnerabilities.
To help reduce potential exposure, M5 recommends that Sentinel CS customers:
• Apply the latest Linux security patches and updates provided by their operating system vendors.
• Where a fixed kernel is not yet available, apply the interim mitigations recommended by their operating system vendor.
• Reboot after installing the updated kernel and confirm the running kernel version.
• Follow their organization’s standard security and system maintenance procedures.
This document contains information that is proprietary to M5 Technologies.
M5 Technologies reserves all rights to this document as well as to the Intellectual Property of the document and the technology and know-how that it includes and represents.
This publication cannot be reproduced, neither in whole nor in part, in any form whatsoever, without written prior approval by M5 Technologies.
M5 Technologies reserves the right to revise this publication and make changes at any time and without the obligation to notify any person and/or entity of such revisions and/or changes.