WTF Ubuntu?

The author, writing on 2026-11-02, says they are moving all their servers off Ubuntu after Ubuntu failed to ship a patch for CVE-2026-98432, a critical (CVSS 9.8) Linux kernel TCP bug present since 2016. The article states that Anthropic built a working exploit that gets root on a server, and that Debian patched the bug on October 16 while Ubuntu, with every supported release including LTS listed as "Vulnerable," still had no fix more than two weeks later. The article also notes that Arch and Alpine have shipped the fix and that the author had to take their Ubuntu servers offline because there was no time to migrate services and data.