Ubuntu's delayed CVE-2026-98432 fix is in -proposed, likely held back by database regression fixes

bytebot · x · 2026-11-03

Investigating why Ubuntu hasn't shipped CVE-2026-98432, the author found fixes for 22.04, 24.04, and 26.04 already sitting in the -proposed repository. Notably, gregkh pushed the CVE announcement on Oct 15, but it only appeared on Launchpad on Oct 20 (Bug #2171521, tracking the v5.15.223 upstream stable release). The delay is likely due to additional regression fixes, some affecting production databases, being bundled in.

Original post →

More from Infra

Infra channel →