---
title: "[5.9] DSM Patch 2 - November 04, 2026"
slug: "5-9-dsm-patch-2-november-04-2026"
updated: 2026-11-04T17:39:59Z
published: 2026-11-04T17:39:59Z
canonical: "support.fortanix.com/5-9-dsm-patch-2-november-04-2026"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.fortanix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# [5.9] DSM Patch 2 - November 04, 2026

Fortanix Data Security Manager (DSM) 5.9.2986.3663 provides an overview of security fixes.

> [!WARNING]
> WARNING
> 
> - If you want to upgrade Fortanix DSM to version 5.9.2986.3663, your current DSM version must be at 5.8* or 5.7*.
> - Downgrade from 5.9.2986.3663 to any prior version is not supported due to Kernel upgrades.
> 
> *******The minimum required version is specific to your current major.minor version. You must first upgrade to the required patch level within your current version before proceeding to version 5.9.2986.3663.**

> [!NOTE]
> NOTE
> 
> - The Fortanix DSM cluster upgrade must be done with Fortanix Support on call. Please reach out to Fortanix Support if you are planning an upgrade.
> - The customer's BIOS version must be checked by Fortanix Support before the Fortanix DSM software upgrade. If required, the BIOS version should be upgraded to the latest version and verified by Fortanix Support for a smooth upgrade.
> - If your Fortanix DSM version is 5.8 or later, then the HSM Gateway version must also be 5.8 or later. Similarly, if the HSM Gateway version is 5.8 or later, then your Fortanix DSM version must be 5.8 or later.

## 1. Security Fixes

- Updated the Linux kernel to address [CVE-2026-98432](https://nvd.nist.gov/vuln/detail/cve-2026-98432), a use-after-free vulnerability in the IPv4 TCP networking subsystem that could potentially lead to denial of service (DoS) or remote code execution **(JIRA: SI-131)**.

The updated kernel version is **GNU/Linux 6.8.0-147-2.0-fortanix-appliance (x86_64)**. Customers can run `uname -a` from a shell prompt to verify the running kernel version after the update.

Customers can also verify the full DSM software build number by navigating to **System Administration** → **Software update** and checking the version marked as **Deployed** under **Version history**.

*For a complete list of new features, enhancements to existing features, other improvements, bug fixes, and known issues, refer to the full description of the* [*DSM 5.9 release notes*](/v1/docs/5-9-dsm-august-8-2026)*.*

## 2. Installation

To install the DSM Runtime Encryption® SGX (on-prem/Azure) and Software (AWS/Azure) packages, [Download Here](/v1/docs/dsm-installation-packages-on-prem).

## Related

- [[5.9] DSM Patch 1 - October 23, 2026](/5-9-dsm-patch-1-october-23-2026.md)
- [[5.9] DSM - August 7, 2026](/5-9-dsm-august-8-2026.md)

## Attachments

- [DSM_5.9_Patch 2_Release_Note-November-04.pdf](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/DSM_5.9_Patch 2_Release_Note-November-04.pdf)