Ubuntu has included early kernel fixes for CVE-2026-98432 in its -proposed pocket for 22.04 LTS and newer releases This article explores kernel fixes cve. . The bug is a serious Linux kernel flaw that allows remote users to run commands as root without a login or any user interaction.
Canonical's security team notes that the flaw affects kernel versions 4.4 and later, specifically impacting how the Linux kernel sets up IPv4 TCP connections.
Release Package Patch status Fixed kernel version Trusty (14.04) Linux Not affected Not applicable Xenial (16.04) Linux Fix pending Not yet released Bionic (18.04) Linux Fix pending Not yet released Focal (20.04) Linux Fix pending Not yet released Jammy (22.04 LTS) Linux Fix available in -proposed 5.15.0-203.213 Noble (24.04 LTS) Linux Fix available in -proposed 6.8.0-149.149 Resolute (26.04 LTS) Linux Fix available in -proposed 7.0.0-43.43 Stonking (26.10) Linux Fixed 7.3.0-10.10 Canonical conducts extensive testing on over 2,000 certified servers and devices before deploying a kernel to the updates pocket.
Initially, it instructs the kernel to send back additional bytes that might contain a kernel pointer, thereby circumventing Kernel Address Space Layout Randomization (KASLR), a mechanism designed to obscure where kernel code resides. Signs of Cyberattacks in the Wild Researcher Marcus Hutchins has observed what appears to be threat actors scanning the entire internet for affected systems. A deeper TLS scan found approximately 762,774.
