Today's Trends
criticalInvestigating

Ubuntu CVE-2026-98432 Critical Vulnerability Lacks Patch After One Week

  1. Investigating(current)
  2. Trending(upcoming)
  3. Workaround available(upcoming)
  4. Resolved(upcoming)

Executive summary

Ubuntu has left a critical 9.8-rated vulnerability (CVE-2026-98432) unpatched for nearly a week, with the status remaining as work in progress. Users are frustrated by the delayed update response, though a mitigation is listed on the security advisory page.

No verified workaround yet

None of the linked reports describe a mitigation. Follow this incident to hear when one appears.

Official fix
Technical root cause

Under active investigation. No report has identified a root cause yet.

Evidence

1 report · 1 HNShow
  1. [1]
    HN First report
    Ask HN: What in the world is taking Ubuntu so long?(opens Hacker News thread in a new tab)

    Ubuntu has CVE-2026-98432 marked as a 9.8, but yet it's coming up on a week with no update to fix it. It's still marked as "work in progress" (though at least now they've listed a mitigation): https://ubuntu.com/security/CVE-2026-98432 I've had mitigations in place for a week, but this response is really shaking my confidence in Ubuntu. I'm just trying to understand what is going on with Ubuntu. Do they have too many kernels (that page is loooong), do they not have enough automation in the…

    by linsomniac 153upvotes 95comments

Timeline

  1. First report on Hacker News thread

    Ask HN: What in the world is taking Ubuntu so long?

    Source