> I'm not seeing CVE-2026-98432 included in the changelog for any of the new kernels on the 28th.

The versions are mentioned in this page:

* https://ubuntu.com/security/CVE-2026-98432

I'm wondering if the CVE in question is not mentioned because it was embargoed so they did not want to accidentally leak things while the kernel went through the (public?) QA workflow. Perhaps the Changelog will be amended at some point to have the CVE?