Update: Ubuntu Security Patch Available for CVE-2026-98432

This is an update to our 30 October advisory about CVE-2026-98432, a flaw in the part of Linux that accepts new network connections.

What has changed

• Ubuntu has released the fix for Ubuntu 22.04 and 24.04.
• There are still no confirmed attacks. The flaw is not on CISA's list of vulnerabilities used in real attacks, and no public code exists that uses it to take control of a server. Some security researchers report scanning that may be looking for vulnerable servers, so we are treating this update as urgent.
• Ubuntu 20.04 and older do not have a fix yet.

How to protect your site

• We will install the kernel update on your servers. The fix only takes effect after a server restarts. To choose a restart time that suits you, open a support ticket or email support@webscalenetworks.com with the subject “Update: Ubuntu Security Patch Available for CVE-2026-98432”. This helps us prioritize your request.

• If you run Ubuntu 20.04 or older: The fix is not available yet. Ubuntu will release it only through Ubuntu Pro. We will contact you about next steps for these servers.

Further support

If you have any other questions about this advisory, please reach out to our support team through your customer portal or by emailing support@webscalenetworks.com.