WTF Ubuntu? https://chalmovsky.com/posts/wtf-ubuntu
In case you missed it: CVE-2026-98432 is a critical (CVSS 9.8) bug in the Linux kernel's TCP code. It's been there since 2016, so virtually every Linux server on the planet has it, and it can be hit remotely. Anthropic says it built a working exploit that gets root on a server. A total takeover.
Debian patched it on October 16. Ubuntu still doesn't have a patch more than two weeks later. Every supported release, LTS included, is listed as "Vulnerable".
How do they get 9.8 out of that?
As described, this isn't even simple to DoS, let alone to RCE. Is there more that they're not telling us?
@nixCraft