Browse aymeric's, an independent, searchable archive of readable snapshots from followed feeds, preserved in Git with aggr. https://aggr.aymericbeaumet.com/sources/freenode.net/ 2026-11-02T18:39:38+00:00 aymeric's aggr urn:aggr:item:fd47b0731381510b3d17be18ecd6f24c2cc5da47 2026-11-02T18:39:38+00:00 2026-11-02T18:39:38+00:00 majorchord

No patched kernels are available yet for 22.04, 24.04, or 26.04 despite a CVSS 9.8 rating. Ubuntu has not shipped fixed kernels for CVE-2026-98432, a critical vulnerability scored CVSS 9.8, leaving the 22.04, 24.04, and 26.04 LTS releases…

<p>No patched kernels are available yet for 22.04, 24.04, or 26.04 despite a CVSS 9.8 rating.</p> <p>Ubuntu has not shipped fixed kernels for <a target="_blank" rel="noopener noreferrer" href="https://www.cve.org/CVERecord?id=CVE-2026-98432">CVE-2026-98432</a>, a critical vulnerability scored CVSS 9.8, leaving the 22.04, 24.04, and 26.04 LTS releases without a vendor update.</p> <p>Operators running those releases therefore have no official kernel package that closes the hole. The gap matters most for internet-facing and multi-tenant self-hosted systems that rely on Ubuntu’s LTS kernels for isolation and privilege boundaries; until packages appear, those hosts remain exposed to whatever remote or local attack the CVE enables.</p> <p>Ubuntu has not announced an ETA for the fixes. In the interim, affected administrators are left to decide whether to stay on the stock kernel, apply out-of-tree mitigations if any exist, or move workloads onto releases or kernels that already carry the patch.</p>