{
  "id": 19469526,
  "title": "Running your own Amnezia VPN server? You need to patch this critical Linux flaw now",
  "url": "https://urgent.news/2026/11/11/running-your-own-amnezia-vpn-server-you-need-to-patch-this-critical",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-11T07:39:49.000Z",
  "source": {
    "name": "TechRadar",
    "slug": "techradar",
    "url": "https://www.techradar.com/vpn/vpn-services/running-your-own-amnezia-vpn-server-you-need-to-patch-this-critical-linux-flaw-now"
  },
  "original_language": "en",
  "account": "Amnezia VPN has issued a critical warning about a recently discovered Linux kernel flaw affecting servers running the Xray protocol. The vulnerability, tracked as CVE-2026-98432, allows an attacker to gain full control of a server without any user interaction. This flaw exists in the code responsible for handling IPv4 TCP connections and has been present in Linux since version 4.4. Security experts have rated the severity of the exploit at 9.8 out of 10, which is the highest possible score.\n\nAmnezia VPN, a privacy-focused VPN service, has confirmed that its own servers are protected because the company has already updated and audited its infrastructure. However, self-hosted users who run their own Amnezia VPN servers on Linux need to take immediate action to secure their setups. The flaw is particularly dangerous for servers running the Xray protocol, which is the engine behind Amnesia's censorship-resistant protocols like VLESS.\n\nTo protect their servers, users must follow three steps outlined by Amnezia VPN. First, they must update the server packages to version 5.1.0.6 or later. This will enable a new button within the Amnezia app that allows for package updates directly on the server. Second, users must reinstall Xray after updating the packages. The updated Xray version uses a patched kernel, effectively closing the security vulnerability. Lastly, after the server goes offline during the reboot, users must reinstall Xray, which now uses the patched kernel.\n\nWhile the update button in the Amnezia app guarantees a fixed kernel, it is not foolproof. On some Ubuntu versions, the patch is only available in the -proposed testing channel. Until Amnesia releases an updated app version, users should consider alternative measures like blocking IP options through a firewall rule or switching to the UDP-based AmnesiaWG.",
  "summary": "Amnezia VPN has told self-hosted users to patch their servers against CVE-2026-98432, a critical Linux kernel flaw that puts Xray setups at particular risk.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}