Patching every hypervisor in one day: rolling kernel updates for CVE-2026-99999
CVE-2026-99999 is a flaw in the Linux kernel's IPv4 stack, rated CVSS 9.3. It can let a virtual machine break out to its host. On a VPS platform every customer is root inside a guest, so every host was exposed.
There was no workaround. The only fix was the patched kernel and a reboot of every hypervisor.