Note that even the latest OpenWRT is vulnerable to this, I'm running OpenWRT 25.12.6 and the kernel version is 6.12.112
replyIIUC it doesn't have any listening sockets open on WAN by default at least?
replyI do see sockets listening on all interfaces, but those are blocked by the firewall.
reply root@OpenWrt2:~# ss -Qlnt4 'src 0.0.0.0'
State Local Address:Port Peer Address:Port
LISTEN 0.0.0.0:443 0.0.0.0:*
LISTEN 0.0.0.0:80 0.0.0.0:*
LISTEN 0.0.0.0:22 0.0.0.0:*They'd also need to MPTCP right?
replyI’m in the market for a new router. Got a unifi u7 pro for wifi already, what are the options for routers? Sounds like the only safe thing is to roll your own so you can update things on time.
replyIf you wants something with a nice web interface, probably OpenWrt [1] or OPNsense?
reply[1] Yes, it seems that they are still on 6.12.112, but they'll probably roll out an update quickly. Also see: https://forum.openwrt.org/t/cve-2026-98432-kernel-update-or-...
If you have a separate WiFi AP running your own router on your *nix of choice is quite achievable. I use NixOS since I use it everywhere else, if I didn't I'd probably go with OpenBSD.
reply