Ask HN: Ubuntu release delays discussed
The gist
Canonical has issued no Ubuntu Security Notice or Livepatch notice for CVE-2026-98432, a Linux kernel TCP RCE, as of Nov 3.
Fixed kernels sit in the -proposed pocket, leaving LTS users exposed while they wait.
How it unfolded
- Oct 26, 2026Fixed Ubuntu kernels for 22.04 LTS (5.15.0-203.213) and 24.04 LTS (6.8.0-149.149) entered the -proposed pocket.
- Oct 28, 2026The fixed Ubuntu 26.04 LTS kernel (7.0.0-43.43) entered -proposed; 24.04 linux-azure (6.8.0-1073.82) also in -proposed since this date.
- Oct 29, 202624.04 linux-aws (6.8.0-1069.74) in -proposed since this date.
Key terms
- RCE
- A security flaw letting an attacker run any commands or code of their choice on a target machine or process.
- Livepatch
- A free, open-source Unix-like kernel that powers many operating systems, including Android and most servers.
Source: Wikipedia