Patch availability varied on Oct. 30: Canonical’s tracker showed Ubuntu fixes in progress, while AlmaLinux reported patched kernels in testing.
Intersect’s Oct. 30 weekly update assigned the vulnerability a 9.8 score under the Common Vulnerability Scoring System (CVSS). Intersect asked operators to inspect the Linux kernel on both producer and relay machines, then restart each system after installing a distribution-provided fix.
Canonical’s Ubuntu CVE tracker listed fixes as in progress for affected Ubuntu releases as of Oct. 30. AlmaLinux said in its announcement that day that patched kernels were available in its testing repository. The announcement identified the Linux kernel CVE team as the source of the CVSS score.
The update did not give a release date that applies across distributions. Operators’ next step is to install the fix and reboot when their own distribution publishes it, Intersect said.
