Kernel security update still rolling out to Forge servers

Incident Report for Laravel Forge

Identified

Earlier today we emailed customers that an updated kernel for CVE-2026-98432 had been installed on their servers and only needed a reboot. The update is still rolling out, and it hasn't reached every server yet. On those servers, rebooting won't change anything until the update is installed.

To check a server, first find your Ubuntu version:

lsb_release -rs

Then check the running kernel:

uname -r

You're patched if it shows this version or newer for your Ubuntu version:

Ubuntu 22.04: 5.15.0-203 (AWS: 5.15.0-1120 or 6.8.0-1069)
Ubuntu 24.04: 6.8.0-149 (AWS: 6.8.0-1069)
Ubuntu 26.04: 7.0.0-43 (AWS: 7.0.0-1017)
If your version is older and you don't want to wait, you can update it yourself:

sudo apt update
sudo apt install --only-upgrade linux-generic linux-image-generic linux-headers-generic linux-virtual linux-image-virtual linux-aws linux-image-aws linux-headers-aws linux-gcp linux-image-gcp linux-headers-gcp

This command covers all common server setups. It upgrades only the kernel packages already on your server and skips the rest, so it won't install anything new.

Then reboot the server and check uname -r again.

Posted Nov 06, 2026 - 21:59 UTC