Skip to main content

​
10.0.1

Release Date: 13 August 2026 Follow these links to learn about what’s new in this release: Security Update in Release 10.0.21 New and Enhanced Features in Release 10.0.1

​
Security Update in Release 10.0.21

Release 10.0.21 applies a mitigation for a Linux kernel vulnerability (CVE-2026-98432) on gateways. The Controller receives the kernel fix through operating system updates, so you do not need to upgrade the Aviatrix software first. As soon as you can, check the Controller kernel version, and reboot the Controller if it is running an older kernel. Gateways running 8.1.x or later are mitigated shortly after the Controller is upgraded. When you have a maintenance window, upgrade the Controller to 10.0.21, and then upgrade your gateways to 10.0.21. For how to check the kernel version and the fixed versions, see PSIRT Advisories

​
New and Enhanced Features in Release 10.0.1

​
Updated Platform Base Image

Controller and gateway images have been rebuilt on the latest actively maintained base OS:
  • Eliminates a large number of CVEs tied to the previous OS. Vulnerability scanners report a significant drop in findings after upgrade.
  • Restores ongoing access to upstream security patches.
  • Supports compliance requirements that mandate timely remediation of known vulnerabilities, including SOC 2, FedRAMP, and PCI-DSS.

​
Data-at-Rest Encryption

Container data on the Controller and gateway is encrypted at rest with AES-256, a quantum-resistant cipher:
  • Protects sensitive configuration and credentials if a disk snapshot is accessed outside the running system.
  • Addresses data-at-rest encryption requirements across SOC 2, FedRAMP, PCI-DSS, and FIPS 140-3.
  • Applied automatically during upgrade. No changes to your deployment are required.