---
title: "[5.7] DSM Patch 3 - November 04, 2026"
slug: "5-7-dsm-patch-3-november-04-2026"
updated: 2026-11-04T17:51:30Z
published: 2026-11-04T17:51:30Z
canonical: "support.fortanix.com/5-7-dsm-patch-3-november-04-2026"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.fortanix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# [5.7] DSM Patch 3 - November 04, 2026

Fortanix Data Security Manager (DSM) 5.7.2988.3665 release provides an overview of security fixes.

> [!WARNING]
> **WARNING**
> 
> - **Some of the security fixes included in this release may cause a degradation of the performance of RSA and EC cryptographic operations. If cryptographic operation performance is a concern, this release should be tested before deployment in production.**
> - If you want to upgrade Fortanix DSM to version 5.7.2988.3665, your current DSM version must be at least 5.4 Patch 4* or 5.6 Patch 3*.
> - Downgrade on S3 appliances is not supported due to the BIOS upgrade.
> 
> *******The minimum required version is specific to your current major.minor version. You must first upgrade to the required patch level within your current version before proceeding to version 5.7.2988.3665.**

> [!NOTE]
> **NOTE**
> 
> - The Fortanix DSM cluster upgrade must be done with Fortanix Support on call. Please reach out to Fortanix Support if you are planning an upgrade.
> - The customer's BIOS version must be checked by Fortanix Support before the Fortanix DSM software upgrade. If required, the BIOS version should be upgraded to the latest version and verified by Fortanix Support for a smooth upgrade.
> - If your Fortanix DSM version is 5.6 or later, then the HSM Gateway version must also be 5.6 or later. Similarly, if the HSM Gateway version is 5.6 or later, then your Fortanix DSM version must be 5.6 or later.

## 1. Security Fixes

- Updated the Linux kernel to address [CVE-2026-98432](https://nvd.nist.gov/vuln/detail/cve-2026-98432), a use-after-free vulnerability in the IPv4 TCP networking subsystem that could potentially lead to denial of service (DoS) or remote code execution **(JIRA: SI-131)**.

The updated kernel version is **GNU/Linux 6.8.0-147-2.0-fortanix-appliance (x86_64)**. Customers can run `uname -a` from a shell prompt to verify the running kernel version after the update.

Customers can also verify the full DSM software build number by navigating to **System Administration** → **Software update** and checking the version marked as **Deployed** under **Version history**.

*For a complete list of new features, enhancements to existing features, other improvements, bug fixes, and known issues, refer to the full description of the* [*DSM 5.7 release notes*](/v1/docs/5-7-may-25-2026)*.*

## 2. Installation

To install the DSM Runtime Encryption® SGX (on-prem/Azure) and Software (AWS/Azure) packages, [Download Here](/v1/docs/dsm-installation-packages-on-prem).

## Related

- [[5.7] DSM - May 25, 2026](/5-7-may-25-2026.md)
- [[5.7] DSM Patch 2 - October 24, 2026](/5-7-dsm-patch-2-october-24-2026.md)
- [[5.7] DSM Patch 1 - August 11, 2026](/5-7-patch-1-august-11-2026.md)

## Attachments

- [DSM_5.7_Patch 3_Release_Note_November-04.pdf](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/DSM_5.7_Patch 3_Release_Note_November-04.pdf)