Ubuntu update delayed for critical CVE-2026-98432
Original title: Ask HN: What in the world is taking Ubuntu so long?
Ubuntu has left critical CVE-2026-98432 unpatched for nearly a week despite a 9.8 severity rating and available mitigation.
A Hacker News post questions why Ubuntu is slow to release updates for CVE-2026-98432, rated 9.8. The entry remains marked work in progress with mitigation listed but no fixed release. Users express concerns about Ubuntu’s ability to maintain pace with increasing security issues.
Unconfirmed: exact status of CVE remediation unknown
- CVE-2026-98432 rated 9.8 severity
- Update still work in progress
- Mitigation available
- Concern over kernel update pipeline
- Broader OS update maintenance challenges
Impact: unauthenticated remote code execution
| Product | Affected |
|---|---|
| Ubuntu | — |
- 1.check Ubuntu security page
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-98432 | Use-after-free in Linux kernel IPv4 TCP options | 9.8 | <1% | PoC ×25 |
From the original article
1 min read at news.ycombinator.com[](https://news. ycombinator. com/)Hacker Newsnew past comments ask show jobs submitlogin [](https://news.
By linsomniac · news.ycombinator.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.