No patched kernels are accessible yet for 22.04, 24.04, or 26.04 notwithstanding a CVSS 9.8 rating.
Ubuntu has not shipped fixed kernels for CVE-2026-98432, a crucial exposure scored CVSS 9.8, leaving the 22.04, 24.04, and 26.04 LTS releases without a vendor update.
Operators operating those releases hence have no authoritative kernel bundle that closes the hole. The gap matters most for internet-facing and multi-tenant self-hosted systems that depend on Ubuntu’s LTS kernels for isolation and privilege boundaries; until packages appear, those hosts remain exposed to any distant or local assault the CVE enables.
Ubuntu has not announced an ETA for the fixes. In the interim, affected administrators are remaining to decide whether to remain on the inventory kernel, use out-of-tree mitigations if any exist, or move workloads onto releases or kernels that already transport the patch.
.png)
