Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks

No patched kernels are available yet for 22.04, 24.04, or 26.04 despite a CVSS 9.8 rating.

尽管 CVSS 评分为 9.8，但 22.04、24.04 或 26.04 版本目前仍未提供修补后的内核。

Ubuntu has not shipped fixed kernels for CVE-2026-98432, a critical vulnerability scored CVSS 9.8, leaving the 22.04, 24.04, and 26.04 LTS releases without a vendor update.

Ubuntu 尚未针对 CVE-2026-98432 发布修复后的内核，这是一个 CVSS 评分为 9.8 的严重漏洞，导致 22.04、24.04 和 26.04 LTS 版本目前没有厂商提供的更新。

Operators running those releases therefore have no official kernel package that closes the hole. The gap matters most for internet-facing and multi-tenant self-hosted systems that rely on Ubuntu’s LTS kernels for isolation and privilege boundaries; until packages appear, those hosts remain exposed to whatever remote or local attack the CVE enables.

因此，运行这些版本的运营商没有官方内核补丁来填补该漏洞。对于依赖 Ubuntu LTS 内核进行隔离和权限边界划分的面向互联网及多租户自托管系统而言，这一缺口尤为重要；在补丁包发布之前，这些主机仍面临该 CVE 可能引发的任何远程或本地攻击风险。

Ubuntu has not announced an ETA for the fixes. In the interim, affected administrators are left to decide whether to stay on the stock kernel, apply out-of-tree mitigations if any exist, or move workloads onto releases or kernels that already carry the patch.

Ubuntu 尚未公布修复程序的预计发布时间。在此期间，受影响的管理员只能自行决定是继续使用现有内核、应用可能存在的树外（out-of-tree）缓解措施，还是将工作负载迁移到已经包含补丁的版本或内核上。