Ubuntu LTS kernels lack patch for critical CVE-2026-98432
Original title: Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks
No fixed kernels released for Ubuntu 22.04, 24.04 or 26.04 despite CVSS 9.8 rating for CVE-2026-98432, leaving systems exposed for nearly three weeks.
Ubuntu has not shipped patched kernels for releases 22.04, 24.04 and 26.04 for the critical vulnerability CVE-2026-98432 scored CVSS 9.8. The gap affects internet-facing and multi-tenant self-hosted systems relying on Ubuntu LTS kernels. No ETA for fixes announced.
- Ubuntu 22.04 24.04 26.04
- CVE-2026-98432
- CVSS 9.8
- no patched kernels
- 3 week gap
Impact: remote code execution
- 1.Upgrade to a patched kernel
- 2.Monitor for updates
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-98432 | Use-after-free in Linux kernel IPv4 TCP options | 9.8 | <1% | PoC ×25 |
From the original article
1 min read at freenode.net
No patched kernels are available yet for 22. 04, 24. 04, or 26.
By majorchord · freenode.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.