● Covered by 1 source · 1 reportHigh impact1 negative
Ubuntu LTS Kernels Remain Unpatched for Critical CVE-2026-98432 After Three Weeks
Key points
- CVE-2026-98432 is a critical vulnerability (CVSS 9.8).
- Ubuntu 22.04, 24.04, and 26.04 LTS kernels are unpatched.
- No official kernel updates are available after almost three weeks.
- Internet-facing and multi-tenant systems are at risk.
Unpatched Critical Vulnerability
Ubuntu has not yet released official kernel patches for CVE-2026-98432, a critical vulnerability. This flaw has a CVSS rating of 9.8, indicating a severe risk.
The affected Long Term Support (LTS) releases include Ubuntu 22.04, 24.04, and 26.04. As of now, no vendor updates are available for these versions.
Exposure for Key Systems
The absence of patches means that systems running these Ubuntu LTS kernels are exposed. This is particularly concerning for internet-facing and multi-tenant self-hosted systems.
These systems rely on Ubuntu’s LTS kernels for isolation and privilege boundaries, and without a fix, they remain vulnerable to remote or local attacks that exploit CVE-2026-98432.
Lack of Resolution Timeline
Ubuntu has not provided an estimated time of arrival (ETA) for the necessary fixes. This leaves administrators of affected systems without a clear timeline for resolution.
In the interim, administrators must decide whether to continue using the unpatched stock kernel, implement any available out-of-tree mitigations, or migrate workloads to other releases or kernels that already include the patch.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
CVE CVE-2026-984329.8 CRITICALReporting from
Ubuntu has not released patches for CVE-2026-98432, a critical vulnerability with a CVSS score of 9.8, affecting its 22.04, 24.04, and 26.04 LTS kernel releases. This leaves internet-facing and multi-tenant systems using these Ubuntu versions vulnerable to potential remote or local attacks.