# Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks

- HackerByte page: <https://hackerbyte.net/en/stories/a-news-report-criticizing-ubuntu-s-delay-in-releasing-a-patch-for-a-critical-lin-50341462>
- Original source: <https://freenode.net/article/ubuntu-lts-kernels-still-unfixed-for-critical-cve-2026-98432>
- Hacker News discussion: <https://news.ycombinator.com/item?id=50341462>
- Submitted to Hacker News: 2026-11-02T18:39:38.000Z

A news report criticizing Ubuntu's delay in releasing a patch for a critical Linux vulnerability.

## AI-generated summary

Ubuntu's Long\-Term Support \(LTS\) kernel versions for releases 22.04, 24.04, and 26.04 remain vulnerable to CVE\-2026\-98432, a critical RCE flaw with a CVSS score of 9.8. This leaves systems, particularly internet\-facing or multi\-tenant self\-hosted environments, exposed. As of nearly three weeks since the vulnerability's public disclosure, Ubuntu has not provided an estimated time for a fix.

## Key points

- Ubuntu LTS kernels for 22.04, 24.04, and 26.04 are unpatched.
- Vulnerability CVE\-2026\-98432 is a critical RCE with a CVSS 9.8 rating.
- No ETA has been provided for the kernel patches.
- Self\-hosted and internet\-facing systems are most at risk.
- Administrators must choose between staying on the vulnerable kernel, applying external mitigations, or migrating workloads.