A temporary nftables filter against CVE-2026-98432 has been deployed on 26 servers. The article sets out the procedure for applying it, from checking a kernel packet to rolling back and loading the rule after a restart. The commands are intended for Ubuntu systems with nftables and systemd and cover inbound traffic to the host itself. For traffic forwarded to containers or other nodes, a separate filtering chain has to be selected.