WTF Ubuntu? (chalmovsky.com)

Article summary

A critical bug in the Linux kernel's TCP code, CVE-2026-98432, has been discovered and patched by Debian, but Ubuntu has not yet released a patch despite promising timely patches for critical vulnerabilities. The bug can be exploited remotely and has been present since 2016. Ubuntu's delay in patching the bug has led to criticism and a loss of trust. The author of the article has decided to move their servers off Ubuntu due to this issue.

Main themes

• Ubuntu's patching delay
• Linux kernel vulnerability
• Debian vs Ubuntu
• Server security
• Distribution comparison

What commenters say

• Ubuntu's failure to patch a critical bug in a timely manner is unacceptable and has led to a loss of trust in the distribution.
• Debian is a more reliable choice than Ubuntu due to its faster patching of critical vulnerabilities.
• Ubuntu's brand reputation and ease of use are not enough to justify its use over Debian, especially for servers.
• The use of Ubuntu is often due to inertia or default settings, rather than a conscious choice based on its merits.
• Ubuntu's kernel support is superior to Debian's when it comes to dealing with modern or buggy hardware.
• The delay in patching is not surprising given the perceived problems with Ubuntu's culture and priorities.
• Some users have had negative experiences with Ubuntu's updates and upgrades, which can be problematic and unstable.