Security notice: Security update for CVE-2026-98432 completed

As of November 1, 2026

We have completed the security update for the Linux kernel vulnerability CVE-2026-98432 across awork's affected production infrastructure.

All affected components of our production infrastructure now use a kernel version that includes the vendor's fix. We verified the running versions after the update. These components are not directly accessible from the public internet, which limits their exposure to direct attacks from the internet.

As of the date of this notice, we are not aware of any cases in which this vulnerability has been exploited at awork.

You don't need to take any action related to your use of awork.

We are monitoring further developments as part of our security processes.