Ubuntu ships fixes for critical CVSS 9.8 Linux kernel TCP flaw CVE-2026-98432

emax · x · 2026-11-03

Canonical disclosed CVE-2026-98432, a critical (CVSS 9.8) flaw in how the Linux kernel sets up IPv4 TCP connections, affecting kernels 4.4+. Fixes for Ubuntu 22.04 and 24.04 are in the -proposed pocket for users running their own kernel tests; they're being validated on 2,000+ certified servers before landing in updates. Ubuntu 14.04 is unaffected; fixes for 16.04–20.04 are pending.

Original post →

More from Infra

Infra channel →