Author announces abandonment of Ubuntu due to delayed patching of critical kernel vulnerability

The blogger decided to migrate all servers away from Ubuntu because Ubuntu was slow to patch CVE-2026-98432 (CVSS 9.8) in the Linux kernel TCP code. The vulnerability has existed since 2016 and can be exploited remotely to gain root privileges; Anthropic stated it had built working exploit code; Debian completed patching on October 16, while all supported Ubuntu versions (including LTS) were still marked as vulnerable nine days after the vulnerability was rated. The author points out that volunteer-maintained distributions such as Debian, Arch, and Alpine have all released fixes, while Canonical, which sells security subscription services, has not yet provided a patch, so he took the affected servers offline.