@probable_possum@leminal.space
2026-10-31 02:06 UTC
Is it known if/ when Ubuntu is going to provide a fix? ubuntu.com/security/CVE-2026-98432 Rn the page states: work in progress for a fix.
Someone rated the issue as 9.8.Other distributions provided a fixed kernel package 10days ago. Some say, Ubuntu engineers do not rate the issue as critical. But there are exploits available which prove a DoS. Not sure if the RCE with privilege escalation has an exploit yet and under which circumstances the RCE works. Is a golang service required? Are other services affected - is multipath TCP sufficient? Does the issue affect ipv6 too?
DoS isn’t that bad. RCE with root + an exploit on the other hand. Um…
Replies (1)
-
@GreenKnight23@lemmy.world 2026-11-01 23:23
if you run Ubuntu as a server nobody should take you seriously. Debian literally exists as a server first while Ubuntu exists as desktop first. the only valid excuse to using Ubuntu server is if your hardware is a RPI or rpi-clone and at that point you’re at a hobbyist level which makes more sense why you’d be using Ubuntu at all.