CVE-2026-98432, a Linux kernel TCP flaw rated 9.8, got an interim mitigation from Red Hat on 30 October 2026 and a patch on 1 November, while Ubuntu’s fixes were still in its opt-in testing channel on 2 November; no attacks had been reported.

What this evidence bears on

• Supports: No attacks on CVE-2026-98432 had been reported even after its exploit was announced, so real attackers are still slower than the theory.

  • A reply in “Shorten the deadline”

• Supports: Once a flaw is public, users can protect themselves with workarounds instead of waiting blind for a patch.

  • A reason for “Shorten the deadline”