Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks
Summary
Ubuntu has yet to ship patched LTS kernels for critical CVE-2026-98432, a CVSS 9.8-rated Linux kernel RCE, leaving 22.04, 24.04, and 26.04 users exposed for nearly three weeks with no announced ETA for fixes.
View Cached Full Text
Cached at: 11/02/26, 09:38 PM
Similar Articles
WTF Ubuntu?
Ubuntu is criticized for failing to patch CVE-2026-98432, a critical CVSS 9.8 Linux kernel TCP bug with a working root exploit, more than two weeks after Debian and other distros shipped fixes, prompting the author to migrate servers off Ubuntu.
@tobi: What a disaster
Linux's stable kernels shipped fixes for CVE-2026-98432, a critical (CVSS 9.8) use-after-free in the IPv4 TCP handshake reachable by remote unauthenticated attackers; Anthropic reported the bug and says its Claude model wrote a working remote root exploit, while Ubuntu and RHEL remain unfixed.
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
A critical Linux kernel TCP vulnerability with a 9.8 CVSS score has been disclosed, affecting Ubuntu, Red Hat, and other major distributions, prompting widespread patching efforts.
Several Linux kernel vulnerabilities accidentally posted to public mailing list
Trend Micro's Zero Day Initiative accidentally disclosed multiple high-severity Linux kernel vulnerabilities (up to CVSS 9.0) on the public LKML instead of the private security list, prompting responses from Greg Kroah-Hartman as patches are expedited.
432 Linux kernel CVEs published in the last 24 hours
432 Linux kernel CVEs were published in the last 24 hours, indicating a significant batch of security vulnerabilities.