A server operator criticized Ubuntu’s response to CVE-2026-98432 as of 14:48 UTC on November 2. The Linux TCP memory-safety flaw carries an official CVSS score of 9.8. The Ubuntu advisory checked for this report still marked several default kernels, including 22.04 and 24.04, as vulnerable with fixes in progress. An upstream stable-kernel fix is not the same as a released Ubuntu package. The author’s decision to take servers offline and migrate was an individual response, not a universal requirement; administrators should check the advisory for their exact kernel family.
Back to Tech
Ubuntu faces criticism over delayed patching of a critical TCP flaw
Match the running kernel family to the official status, rather than relying on the distribution name alone.