https://ubuntu.com/security/CVE-2026-98432Ubuntubros I don't feel so good
>>110193695Watch it be a nothingburger
>>110193721The point is not just the security flaw. OP forgot to show which versions of Ubuntu have patched it. Hint: none of them.
>>110193721watch the php2tards fall for it again
>>110193695Wtf I'm going to buy Ubuntu pro now
>>110193695this is so confusing is this new or from last week?
I updated my ubuntu server yesterday, fuck that
>>110194155They found it back on the 15th. They just didn't think it was important until today.
>>110193695updated all 8 boxes, thanks
>>110193695>Shove it up 200+ packages into a distro and make it so bloated to simulate le pajeetsoft experience where everything works out of the box>muh security exposed>suprised_pikachu_face.jpgI mean it’s inevitable the fact that every “user friendly” distro will get pozzed by either with bugs or chink/ruski cyber mafia. The original creator of the kernel thinks bugs should be included in the software for the sake of not breaking userspace. If your users are literal retards that runs the downloaded binary like a monkey then what’s the point of open source Un*x like OS where everything runs efficiently and bug free? Look at brain dead manchildren gamers for example. They think that copying commands from wiki and doing setup on terminal with arch based distro is “cool” on the other hand they run malware from aur just for convenience’s sake. Tl,dr: install gentoo and compile your own selected apps and try to understand your system faggit.
>>110194258The fix isn't even out yet
>>110194292can I just make a cronjob that does update, upgrade - y, autoremove -y?or is that bad for me?
>>110194299It honestly depends, if you don't run anything mission critical that depends on something - should be obvious.
>>110194312idgi
>>110193721fpbp /thread
>>110193695Is this Ubuntu only
>>110194387I don't know
>>110193695>14.04 LTS trusty Not affectedUPDOOTERS BTFO
>>110194387It was kernel wide, dude. Most distros already patched it.For debian related distros, because that's what I work on:apt updateapt list --upgradableapt upgradeuname -rlinux-version listIf uname -r shows a lower version yhan linux-version list, you need to reboot to pick up the new kernelAnd now I'm realizing I have a fuckload of Alpine VMs I need to figure this out on too.
>ubuntu
>>110193721Well it's already been patched.
>>110193695>linus starts vibecoding the kernel>critical vulnerabilities start to pop uplike a clockwork
>>110193695Does this only concern ubuntu kernel?
>>110194538>Nothingburger has already been eaten>More news at 11
>>110193695>System administrators should transition they probably already have
>>110194650NO WE HAVEN'T. WANT TO GUESS WHY?
There is nothing showing for kernels yet on Debian 13 with apt -U full-upgrade?https://www.debian.org/security/https://www.debian.org/lts/security/
>>110194757Debian patched this a while back: https://security-tracker.debian.org/tracker/CVE-2026-98432
>>110194799Oh so it's another nothing-burger then. Ubuntu must be
>>110194844Imagine being slower than Debian. DEBIAN.
>>110194854KekDebian always made fun of "stable but no updates" still faster than Ubuntu
>>110194528do nothing an win
>>110193695Another closedchad victory
>>110194299yes, unattended upgrades are goated.unless you use a tard distro with maintainers that dont give a fuck about pushing breaking changes into supposedly "stable" distros
>>110193721>w-watch it be a nothing bur-ACKwhy do you fucktards keep coping?
>>110195105Anon, we've had multiple 'world breaking' CVEs this month and all of them turned out to be nothingburgers. This one's even patched already.
>>110195149it's literally another exploit chain primitive just waiting there for most shit that just won't be patched. I really have been trying to force just deploying Fedora Server at work because of this constant stream of diarrhea so at least people are forced on the latest userland/kernel.
>>110194757are you blind?>[16 Oct 2026] T DSA-6568-1 linux security updatehttps://lists.debian.org/debian-security-announce/2026/msg00482.html
>>110194299kernel needs reboots, so that won't help you.you need ubuntu pro that does live-patches for the kernel.https://ubuntu.com/security/livepatch
>>110194130https://dreamgroup.com/blog/chained-php2shell-exploit-roots-25-serversDumbasses.
>>110195178poc needed almost an hour of flooding the server until the flaw was triggered. any competent firewall will have banned the attacker long before.https://www.anthropic.com/research/discovering-vulnerabilities-with-claude>An enabling property of this race condition is that a lost race only fails the handshake without crashing the whole system, so a determined attacker can retry indefinitely until they succeed. In our proof of concept, it takes 48 minutes to leak a kernel pointer and another five minutes to reach the shell command execution.
>>110193695The time of GNU Hurd has come
Still no patch. Thanks, Ubuntu. Fuck load of VMs just stuck waiting. Feels awesome.
>>110197321>guy who claims to have found something claims the thing is very serious>no evidence
>>110197363why do your VMs have mptcp enabled? it's rather obscure.
>>110197368>Palo Alto Networks’ Unit 42 has independently verified the attacker’s tooling and results, and Palo Alto Networks is releasing fixed PAN-OS versions across the affected branches.The American school system has been a disaster for the human race.
>>110197413That's the 2nd race condition. 1st does not require any enablement, as far as I'm aware.
>>110197427>posts self-pwn he can't understandTruly peak 65 IQ right there
>>110193695what the fuck is multipath tcp?
>>110197436first stage only defeats aslr and still needs a multipath tcp listener.https://www.anthropic.com/research/discovering-vulnerabilities-with-claude>After initial prompting, Claude wrote an exploit that allows a remote attacker to send packets to Linux servers with a multipath TCP listener to run arbitrary commands as root, without any credentials or user interaction. The underlying vulnerability is a race condition-induced UAF bug in the kernel networking stack. The full exploitation has two key stages:>In the first stage, the attacker defeats KASLR remotely. It exploits the race to make the kernel read an attacker-controlled length field to copy extra bytes and send them back to the attacker, and as long as one such overread contains a kernel pointer in the reply, the attacker learns the kernel address space layout.>In the second stage, the attacker hijacks the control flow. It exploits the same UAF bug to overflow a buffer and overwrite a callback pointer with the address of a payload the attacker has already staged in kernel memory via an ordinary protocol feature. When the kernel invokes the callback, the payload chains a series of calls to existing kernel functions. ending with an attacker-chosen shell command running as root.
>>110197321>PAN-OS uses PHP 8.0.30>The discovered artifacts revealed an operation that began with exploit development in a lab environment and ended with persistent access to a US government organization's internal Active Directory domain.Welp, hope that doesn't lead back to any CN nationals on US payroll.
>>110197460Apparently it lets you use multiple network paths in parallel, which is honestly kind of cool. You could use your wireless network to supplement your ethernet on large downloads, assuming your cord is saturated and the router and upstream link has the badwidth.
>>110197549pan-os isn't secrethttps://www.paloaltonetworks.com/vm-series-trial
>Debian patched this before UbungtuDebian and RHEL are the only real distros anymore. That's crazy.
>>110198392it's not patched in rhelhttps://access.redhat.com/security/cve/cve-2026-98432
>>110198392debian didn't do anything.anthropic is retarded and dropped this flaw without any responsible disclosure because it accidentally got fixed in mainline stable kernels. so anthropic thought it's fine to just make it public.any distro that doesn't use mainline kernels got fucked since you don't backport random patches.
It's fine I'm on Arch
>>110199597Another win for mainlined stable kernels. CorpoFOSScucks lost.
