Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks
3 comments
- Points457
- Comments128
3 comments
Story details from Hacker News ↗ · linked article on freenode.net.
Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks was first seen on Hacker News · Front page on Nov 2, 2026. Since then it has appeared in 64 checks on 2 different days. Its best position was #4 of 30, reached on Nov 3, 10:37 UTC. It dropped off the list after Nov 3, 11:37 UTC.
Position on Hacker News · Front page at every check (lower is better).
Best rank per day (UTC).
Platform metric as reported by Hacker News.
A few top-level comments from Hacker News, shortened. Read the full thread on Hacker News.
I find it odd that no public discussions are highlighting that iptables or nftables can drop this before the kernel CVE is exploitable by a U32 drop rule in raw PREROUTING... sudo iptables -t raw -I PREROUTING -p tcp -m u32 ! --u32 "0>>24&0x0F=5" -j DROP
It's rather uninteresting to note, once again, that Ubuntu has decided to do this. I would like to know the (official, if any - unofficial/speculative otherwise) reason WHY they have not. It does not seem that complicated to patch, and kernel upgrades are a dime a dozen these days. So what is making them delay a fix…
Question: Every consumer router-wirelessAP I've seen runs linux. I never see security upgrades for the kernels they use. Not one. Not ever. Is this something that should be a cause for concern? Even if you don't run a consumer-grade tplink, netgear, asus, whatever router yourself. Update: The context which I should…
Archived daily, weekly and monthly lists that include this entry.
Not at the moment. It was last on the list on Nov 3, 11:37 UTC, after 2 days of trending.
#4 on Hacker News · Front page, on Nov 3, 10:37 UTC. Trendoday checks this list every 15 minutes.
It was first seen on Nov 2, 2026 and has been on the list on 2 days (64 checks) since.
457 points and 128 comments; submitted by majorchord on Nov 2, 2026.