Ubuntu CVE-2026-98432 Critical Vulnerability Lacks Patch After One Week
- Investigating(current)
- Trending(upcoming)
- Workaround available(upcoming)
- Resolved(upcoming)
Executive summary
Ubuntu has left a critical 9.8-rated vulnerability (CVE-2026-98432) unpatched for nearly a week, with the status remaining as work in progress. Users are frustrated by the delayed update response, though a mitigation is listed on the security advisory page.
No verified workaround yet
None of the linked reports describe a mitigation. Follow this incident to hear when one appears.
Official fixUnder active investigation. No report has identified a root cause yet.
Evidence
1 report · 1 HNShow
- [1]HN First reportAsk HN: What in the world is taking Ubuntu so long?(opens Hacker News thread in a new tab)
Ubuntu has CVE-2026-98432 marked as a 9.8, but yet it's coming up on a week with no update to fix it. It's still marked as "work in progress" (though at least now they've listed a mitigation): https://ubuntu.com/security/CVE-2026-98432 I've had mitigations in place for a week, but this response is really shaking my confidence in Ubuntu. I'm just trying to understand what is going on with Ubuntu. Do they have too many kernels (that page is loooong), do they not have enough automation in the…
by linsomniac 153upvotes 95comments
Timeline
- First report on Hacker News thread
Ask HN: What in the world is taking Ubuntu so long?
Source