Tagged articles

CVE-2026-98432

2 articles · Page 1 of 1

Nov 4, 2026 · Information Security

CVE-2026-98432: 9.8 Kernel Use-After-Free in Ubuntu Proposed – 3-Step Manual Upgrade

This article details CVE-2026-98432, a CVSS 9.8 use-after-free in the Linux kernel's IPv4 TCP connection handling, explains its discovery via AI, tracks fix status across distributions, describes Ubuntu's -proposed repository, and provides a three-step command sequence to manually upgrade kernels on Ubuntu 22.04, 24.04, and 26.04 LTS from the proposed channel.

CVE-2026-98432Linux kernelTCP

0 likes · 11 min read

Ubuntu

Nov 3, 2026 · Operations

Ubuntu Fixed the 9.8 CVE — So Why Can't apt Install It Yet?

Ubuntu has patched CVE-2026-98432 (CVSS 9.8) for 22.04, 24.04, and 26.04 LTS, but the fixed kernels sit in the -proposed repository awaiting a two-week certification cycle on over 2,000 devices; 26.10 already includes the fix. Disabling MPTCP is not a valid mitigation, and older releases require an Ubuntu Pro subscription. Admins can wait for updates, enable -proposed for a kernel-only upgrade, or block IP options at the firewall.

-proposedCVE-2026-98432MPTCP

0 likes · 11 min read

Ubuntu Fixed the 9.8 CVE — So Why Can't apt Install It Yet?