Blogger says Ubuntu still lacks patch for critical Linux kernel bug
The gist
A blogger says Ubuntu has not shipped a patch for a critical Linux kernel bug, nine days after it was rated 9.8.
Volunteer-run distros already fixed it, raising questions about Ubuntu's security promise.
How it unfolded
- 2016CVE-2026-98432, a critical (CVSS 9.8) bug in the Linux kernel's TCP code, has been present since this year.
- Oct 16, 2026Debian, a volunteer-run distribution, patched CVE-2026-98432.
- Oct 30, 2026How-To Geek publishes a piece on Linux users switching away from Ubuntu.