upvote
I read the whole post and still don’t have any idea what it is and how severe it is. Ubuntu has not marked it critical. Is there any reason to disagree with that assessment? In an entire post criticizing Ubuntu you’d think they would at least make that case.

They have also not shared why they didn’t patch their kernel directly when updated versions have been available for a couple weeks now. Why wait for Ubuntu at all?

reply
> I read the whole post and still don’t have any idea what it is and how severe it is.

From the article the bits you need to know:

1. CVE-2026-98432 is a critical (CVSS 9.8) bug.

2. Anthropic says it built a working exploit that gets root on a server.

reply
> 2. Anthropic says it built a working exploit that gets root on a server.

Is there any independent verification of this?

reply
Normally what happens is that the vendors get a chance to evaluate the verification, but that in the public's interest the working exploits don't get distributed.
reply
deleted
reply
> Ubuntu has not marked it critical.

Yes they have, and the article links directly to where they say so: https://ubuntu.com/security/CVE-2026-98432

I think the author probably assumes that after almost 3 weeks of the entire world going ape-shit over this, most people reading their post probably know about it already, or know how to find out more, so they didn't feel the need to elaborate.

> Why wait for Ubuntu at all?

There are many reasons... businesses often cannot go this route. But I don't see why it matters unless you're just trying to attack and discredit this person because you disagree with how they write their articles.

Why are you trying to farm out so much critical thinking to other people for you? It is easy to do a quick web search and find out everything one needs to know.

reply
Page shows

> Ubuntu priority

> High

reply
I'm not following, I don't believe a kernel patch like this would be limited to security subscribers. Or is your complaint that there's a security subscription program but no patch has been produced yet?
reply
You are talking about the company side of the issues. We are talking about the specific issue that is concerning our ubuntu servers. What is the security bug, and how can someone exploit it? Where is that written?
reply
[flagged]
reply
"Pathetic", "such a Karen" to care about a service he ostensibly paid for providing the thing he paid for. Brilliant.
reply
[flagged]
reply