Ubuntu has still not released patched kernels for CVE-2026-98432, a critical 0day RCE vulnerability rated CVSS 9.8, nearly three weeks after disclosure. The unpatched status affects Ubuntu 22.04, 24.04, and 26.04 LTS releases, leaving internet-facing and multi-tenant systems exposed with no official fix or ETA announced.
Background
CVE-2026-98432 is a critical Linux kernel remote code execution vulnerability affecting multiple Ubuntu LTS branches. Ubuntu's LTS security patching process typically involves coordinated kernel updates, but the prolonged delay raises concerns about remediation speed for high-severity flaws.
- Source
- hackernews
- Published
- Nov 3, 2026 at 02:39 AM
- Score
- 7.0 / 10