From the NetApp edition of November 6, 2026
NetApp advisory NTAP-20261106-0001: critical Linux kernel CVE-2026-72493; ONTAP Select Deploy Affected
NetApp Product Security · Storage vendor security advisory · Global
- Publisher
- NetApp Product Security
- Original publication
- Advisory v1.0, last updated 6 November 2026
- Source retrieved
- 2026-11-07
What happened
On 6 November 2026 NetApp published interim NTAP-20261106-0001 v1.0 for CVE-2026-72493, a Linux kernel slab use-after-free in older 3.x kernel ranges. CVSS 3.1 scores it CRITICAL 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Affected Products lists ONTAP Select Deploy administration utility. Investigating includes Brocade Fabric Operating System Firmware, NetApp Console Agent OVA, SolidFire & HCI management and storage nodes, and SnapCenter Plug-in for VMware vSphere. ONTAP 9, StorageGRID and SnapCenter (non-plugin) appear Not Affected. Status Interim; exploitation Public; workarounds none; fixes empty.
Why it matters
Relevant to SLED virtualization estates that use ONTAP Select Deploy to stand up software-defined ONTAP, and to operators still running Investigating Console Agent OVA, SolidFire/HCI or SnapCenter VMware plugin components. Core ONTAP 9 hardware arrays are listed Not Affected, so risk concentrates on Select Deploy and adjacent management/HCI tooling rather than primary AFF controllers.
Evidence and measured results
Opened the rendered advisory page via WebFetch and the official adv_api JSON for NTAP-20261106-0001; read summary, impact, scoring, Affected/Investigating/Not Affected lists and revision history. Vendor self-disclosure; kernel.org stable commits referenced.
Limitations and uncertainty
Interim; no workaround or fix; Investigating products may still move to Not Affected; ONTAP 9 Not Affected does not clear Select Deploy; product tables from adv_api.
Put this evidence to work
Lighthouse Advisory interpretation, grounded in this source. Enriched 2026-11-06; this does not change the original publication date. Each role follows the same checklist so takeaways compare across sources.
Sales
Role takeaway
- Customer problem
- SLED teams need clarity on whether ONTAP Select Deploy or adjacent Console/HCI tools sit in this critical advisory’s scope.
- Stakeholders
- CISO
- Storage manager
- Virtualization lead
- Discovery questions
- Do you run ONTAP Select Deploy administration utility?
- Which Console Agent OVA, SolidFire/HCI or SnapCenter VMware plugin components are in production?
- Value hypothesis
- Accurate Select Deploy and management-tool inventory prevents false confidence from ONTAP 9’s Not Affected listing.
- Potential engagement
- A bounded Select Deploy / management-plane advisory-mapping workshop.
- Unsupported claims
- ONTAP 9 hardware arrays are Affected
- Any Investigating product is confirmed exploited in SLED
- Fixes are already published
Pre-sales engineering
Role takeaway
- Fit
- Estates with ONTAP Select Deploy or Investigating Console/HCI/SnapCenter-plugin components; low fit for pure ONTAP 9 hardware-only stacks listed Not Affected.
- Architecture and integration
- Isolate Select Deploy and Investigating management endpoints from untrusted networks pending fixes.
- Prerequisites
- Select Deploy inventory
- Console/HCI/SnapCenter-plugin deployment map
- Constraints
- Interim advisory
- No workaround or fix
- Investigating list still open
- Security
- Limit exposure of Affected Select Deploy and Investigating management-plane products; patch when NetApp publishes fixes.
- Proof of value
- Select Deploy instances mapped and network-restricted
- Investigating Console/HCI/plugin components inventoried
Delivery
Role takeaway
- Work
- Inventory Select Deploy and Investigating tools, restrict access, track the advisory, patch when listed.
- Dependencies
- NetApp product disposition and fixes
- Change window for Select Deploy/HCI
- Ownership
- Security operations with storage and virtualization owners.
- Skills and adoption
- No new skills; VM and management-tool inventory discipline.
- Governance checkpoints
- Change approval for Select Deploy/HCI updates
- Close only when Affected/Investigating items are cleared or patched
- Acceptance criteria
- Select Deploy instances inventoried and access-restricted (proposal)
- Listed products patched or confirmed Not Affected (proposal)
- Risks
- Assuming ONTAP 9 Not Affected covers Select Deploy
- Overlooked SolidFire/HCI or SnapCenter plugin hosts
Implementation considerations
Lighthouse Advisory interpretation across the operating dimensions a public-sector buyer must settle before this evidence becomes a design. Each note answers the question under its heading for this specific source.
Architecture and integration
What must connect, and where does the AI sit in the workflow?
Isolate ONTAP Select Deploy administration hosts and Investigating Console/HCI/SnapCenter-plugin endpoints from non-admin networks until NetApp publishes fixes or clears Investigating products.
Governance
Who approves, reviews and stays accountable for outcomes?
Track Interim disposition for Select Deploy and Investigating products; document which virtualization-adjacent NetApp tools are in production.
Security and privacy
What data, permissions and controls need testing?
Successful exploitation could disclose sensitive information, add or modify data, or cause DoS where a vulnerable kernel is reachable with low privileges.
Accessibility and workforce
Who is affected, and what skills or accommodations follow?
SLED teams may need partner help to locate Select Deploy appliances and map Investigating HCI/Console components.
Procurement
What should contracts, pricing and exit terms secure?
No new purchase; prioritize patch readiness under existing support for Select Deploy and Investigating tools.
Operating model
Which teams own the service once it runs?
Security, storage and virtualization owners should jointly track Select Deploy and Investigating management-plane products.
Publication history
- 2026-11-06NetApp · Issue 083 resources
Stable resource ID: netapp-advisory-ntap-20261106-0001-linux-kernel-select-deploy-critical-20261106