Ubuntu LTS kernels still unfixed for critical CVE-2026-98432

Ubuntu has yet to ship patched kernels for CVE-2026-98432, a critical vulnerability rated CVSS 9.8, leaving the 22.04, 24.04, and 26.04 LTS releases without a vendor fix and no announced ETA. Operators running those releases have no official kernel package that closes the hole, leaving internet-facing and multi-tenant self-hosted systems that depend on Ubuntu's LTS kernels for isolation and privilege boundaries exposed to whatever remote or local attack the CVE enables. In the interim, affected administrators must choose between staying on the stock kernel, applying out-of-tree mitigations if any exist, or moving workloads to releases or kernels that already carry the patch. Watch for Ubuntu's security advisory with the fixed kernel packages and any disclosure of the attack vector the CVE enables.