The Scariest Thing Hiding on Your Website This Halloween
It’s Halloween.
There are ghosts in the windows, skeletons hanging from porches, fake cobwebs everywhere—and somewhere deep inside millions of servers around the world, a bug that has apparently been hiding for nearly a decade just crawled out of the dark.
And this one is actually scary.
Researchers recently disclosed CVE-2026-98432, a vulnerability buried inside the Linux kernel—the underlying operating system technology powering an enormous amount of the internet.
The vulnerability affects the part of Linux that handles new TCP connections. In much simpler terms: the part of the server that opens the door when something on the internet knocks.
The vulnerability received a 9.8 out of 10 critical severity rating, can potentially be triggered remotely, and requires no login, existing account, or user interaction. It also appears to have existed in Linux kernels going back to version 4.4, released in 2016.
That means this particular monster may have been hiding under the bed for about ten years.
The Internet Is Full of Things You Never See
When most people think about their website, they think about what they can see.
The logo.
The photos.
The navigation.
The contact form.
The products.
The big button we’re always telling clients needs to be easier to find.
But underneath all of that is an enormous stack of technology.
Your website sits on a server. That server runs an operating system. That operating system contains millions of lines of code. That server communicates with databases, browsers, email systems, APIs, DNS providers, security systems and the rest of the internet.
Most business owners never see any of it.
And that’s exactly how it should be.
Your customer shouldn’t need to understand a Linux kernel to schedule a plumbing appointment, buy a product, book a consultation or send you a message.
But someone needs to be paying attention to it.
Here’s Where the Story Gets Less Scary
Create Element hosts and manages websites using SiteGround infrastructure.
When this vulnerability became public, SiteGround says its engineering team created a custom live patch and deployed it across its servers the same day.
No waiting for a scheduled maintenance window.
No taking websites offline.
No rebooting servers.
No asking thousands of individual website owners to figure out what a Linux kernel vulnerability is.
The patch was applied while the servers continued running. SiteGround says websites, databases, email and SSH connections remained online throughout the process.
For websites hosted there, the instruction was wonderfully simple:
Do nothing. You’re already protected.
That might be our favorite kind of technology.
Good Hosting Is Boring—Until It Isn’t
Hosting is one of those things businesses rarely think about when everything is working.
And we understand why.
Nobody visits a website and says:
“Wow. Incredible server infrastructure.”
They notice when the site loads quickly.
They notice when it works on their phone.
They notice when the contact form works.
And they definitely notice when the website is down.
Good hosting should mostly disappear into the background.
But situations like this are a good reminder that the $5 hosting plan and the professionally managed hosting environment aren’t necessarily the same thing.
You’re not only paying for a place to store website files.
You’re paying for infrastructure, monitoring, backups, security systems, engineers and—when something nasty crawls out of a ten-year-old section of code at midnight—the ability for someone to deal with it before it becomes your problem.
And Then There’s AI
There’s another interesting part of this story.
SiteGround points out that tools powered by artificial intelligence are making it possible for security researchers to analyze enormous old codebases much faster than before.
Linux contains tens of millions of lines of code.
Historically, a vulnerability could sit unnoticed inside something that large for years.
Now AI-assisted tools can help researchers comb through old code and uncover problems that humans simply haven’t found yet.
That’s good news.
It also means we’re probably going to hear more stories like this.
Old vulnerabilities will be discovered faster.
Exploits may appear faster.
And the window between “someone discovered the problem” and “attackers are actively looking for vulnerable systems” is going to get smaller.
AI isn’t only changing how websites are designed.
It’s changing how software is built, tested, attacked and defended.
The Real Halloween Lesson
The scariest problems with a website aren’t always the ones you can see.
Sometimes the homepage looks perfect.
The forms work.
The logo is crisp.
Everything seems normal.
Meanwhile, somewhere far underneath it all, a ten-year-old piece of code has just decided to become today’s cybersecurity emergency.
That’s why we believe website management isn’t just about designing pages.
It’s about the entire system behind them.
Design.
Performance.
Search.
Updates.
Backups.
Security.
Hosting.
And having the right people and technology watching the parts you shouldn’t have to think about.
Because skeletons belong on your porch.
Not in your server.
Happy Halloween from Create Element.
Create Element
Web Design • Hosting • SEO • Creative
CreateElement27.com
Source: SiteGround — Linux kernel TCP vulnerability CVE-2026-98432
https://www.siteground.com/blog/linux-kernel-tcp-vulnerability-cve-2026-98432
