Ubuntu has not released patches for a critical vulnerability, CVE-2026-98432, affecting its 22.04, 24.04, and 26.04 LTS releases. This vulnerability has a CVSS score of 9.8, leaving systems without official updates and exposed to potential attacks. Administrators must decide whether to continue using the stock kernel or seek alternative solutions. No timeline for the release of fixes has been provided by Ubuntu.
Key facts
- CVE-2026-98432 has a CVSS score of 9.8.
- No patched kernels are available for Ubuntu versions 22.04, 24.04, or 26.04.
- The lack of updates affects internet-facing and multi-tenant systems.
- Ubuntu has not announced an estimated time for the fixes.
- Administrators must consider alternative mitigations or kernel versions.
A short AI summary in our own words. The reporting belongs to Hacker News — Front Page; we don't reproduce it.