No patches for Ubuntu or red hat yet.

https://ubuntu.com/security/CVE-2026-98432

https://access.redhat.com/security/cve/cve-2026-98432

codegeek an hour ago | parent | next [-]

Interestingly, Ubuntu Priority is set to "High" and not "Critical" which is defined as:

"A significant problem, typically exploitable for nearly all users in a default installation of Ubuntu. Includes serious remote denial of service, local root privilege escalations, local data theft, and data loss."

▲

throw0101d an hour ago | parent | prev | next [-]

> https://ubuntu.com/security/CVE-2026-98432

The listed kernels are in the "proposed" component (and not yet in "security" or "udpates") if you want to pull them down onto canary systems for testing before going to production.

▲

AdrianCX 2 hours ago | parent | prev [-]

so just block multipath and add the firewall rule from article that drops packets with IPv4 options

	▲	stefangordon 2 hours ago \| parent \| next [-]
		Both of which we are finding out are apparently insufficient to mitigate this.
	▲	grey-area 2 hours ago \| parent \| prev [-]
		Hoping fix will be out soon so we don’t have to.