2026-11-09 13:22 UTC
#ubuntu #security
Canonical seems to be having epic struggles to release kernels with fixes for CVE-2026-98432, TCP remote 9.8 level kernel flaw.
So far they only managed to fix it (at least purportedly) in the kernel for Ubuntu version 26.10.
Their progress page lists kernel versions that were supposed to fix it, but were already totally confusingly released without this fix on closer inspection.
Customers don't hear a word on it.
It seems likely they are overwhelmed.
Replies (1)
-
@gvenema@fairmove.net 2026-11-09 13:26
And I am not terribly surprised. Because Canonical has taken it upon themselves to offer tens of flavours for each distribution and fifteen years of support on all LTS releases, now going back ten or twelve years. And on top of that, they also offer support on tens of other upstream packages in the universe branches on top of main packages. And now one kernel update can contain 3000 different fixes. It would be suprising when they weren't overwhelmed frankly.