Ubuntu has CVE-2026-98432 marked as a 9.8, but yet it's coming up on a week with no update to fix it. It's still marked as "work in progress" (though at least now they've listed a mitigation):https://ubuntu.com/security/CVE-2026-98432I've had mitigations in place for a week, but this response is really shaking my confidence in Ubuntu. I'm just trying to understand what is going on with Ubuntu. Do they have too many kernels (that page is loooong), do they not have enough automation in the build/test pipeline, are their engineers overwhelmed?We are moving into a world where there are going to be vastly more security issues; if you can't keep up now, where are you going to be in the next 6 months?For a long time keeping on top of OS updates has been a huge part of keeping the attackers at bay. However, the world is changing.
Ask HN: What in the world is taking Ubuntu so long?
Key takeaways
Ubuntu has not yet fixed a high-severity CVE-2026-98432 vulnerability, which has been marked as 'work in progress' for a week.
- Ubuntu has a CVE-2026-98432 vulnerability with a 9.8 severity rating.
- The vulnerability remains unresolved, with no update released after a week.
- Users are concerned about Ubuntu's ability to handle security issues effectively.
Summarised automatically by AI from the original article by Hacker News. AI can make mistakes, so check the original for details.
Story details
- Published
- By
- linsomniac
- Format
- Article
- Original
- news.ycombinator.com ↗





