Kristoffer Aurdal (@aurdal) profile picture

Kristoffer Aurdal

@aurdal

Legal-tech gründer, programmerer, siviløkonom, tidligere advokat.

 Oslo
Joined November 2009
  • Tweets1.2K
  • Following512
  • Followers151
20Media
Photo by Kristoffer Aurdal (@aurdal)Photo by Kristoffer Aurdal (@aurdal)Photo by Kristoffer Aurdal (@aurdal)Photo by Kristoffer Aurdal (@aurdal)Photo by Kristoffer Aurdal (@aurdal)Photo by Kristoffer Aurdal (@aurdal)Photo by Kristoffer Aurdal (@aurdal)Photo by Kristoffer Aurdal (@aurdal)Photo by Kristoffer Aurdal (@aurdal)Photo by Kristoffer Aurdal (@aurdal)
Ubiquiti Cloud Gateways still ship on Linux 5.4, which has no fix for CVE-2026-98432 (CVSS 9.8). Current UniFi OS still runs kernel 5.4.213 on these devices. Kernel 5.4 is upstream EOL, so the use-after-free in the IPv4 TCP handshake is unpatched. The Qualcomm offload stack keeps them frozen on this kernel. Any TCP service the gateway itself is listening on is exposed. If you run a TCP VPN such as OpenVPN on the device, consider switching it to a UDP-based VPN like WireGuard.
2
1
189

No more items