Fortanix Data Security Manager (DSM) 5.9.2986.3663 provides an overview of security fixes.
WARNING
If you want to upgrade Fortanix DSM to version 5.9.2986.3663, your current DSM version must be at 5.8* or 5.7*.
Downgrade from 5.9.2986.3663 to any prior version is not supported due to Kernel upgrades.
*The minimum required version is specific to your current major.minor version. You must first upgrade to the required patch level within your current version before proceeding to version 5.9.2986.3663.
NOTE
The Fortanix DSM cluster upgrade must be done with Fortanix Support on call. Please reach out to Fortanix Support if you are planning an upgrade.
The customer's BIOS version must be checked by Fortanix Support before the Fortanix DSM software upgrade. If required, the BIOS version should be upgraded to the latest version and verified by Fortanix Support for a smooth upgrade.
If your Fortanix DSM version is 5.8 or later, then the HSM Gateway version must also be 5.8 or later. Similarly, if the HSM Gateway version is 5.8 or later, then your Fortanix DSM version must be 5.8 or later.
1. Security Fixes
Updated the Linux kernel to address CVE-2026-98432, a use-after-free vulnerability in the IPv4 TCP networking subsystem that could potentially lead to denial of service (DoS) or remote code execution (JIRA: SI-131).
The updated kernel version is GNU/Linux 6.8.0-147-2.0-fortanix-appliance (x86_64). Customers can run
uname -afrom a shell prompt to verify the running kernel version after the update.Customers can also verify the full DSM software build number by navigating to System Administration → Software update and checking the version marked as Deployed under Version history.
For a complete list of new features, enhancements to existing features, other improvements, bug fixes, and known issues, refer to the full description of the DSM 5.9 release notes.
2. Installation
To install the DSM Runtime Encryption® SGX (on-prem/Azure) and Software (AWS/Azure) packages, Download Here.