Warning: SolusVM itself doesn't need a patch, and no action is needed inside the VPSes.
Situation
A critical vulnerability was found in the Linux kernel. Details - https://nvd.nist.gov/vuln/detail/CVE-2026-99999.
Impact
A VM owner can crash the Compute Resource by sending specially crafted network packets from inside their KVM VM (any guest OS). The researchers also report leaking host memory and executing code on the host (i.e. taking over the Compute Resource), however the full details of the host takeover have not been published yet.
Call to Action
- Perform kernel update on all your Compute Resources, followed by a reboot (or a livepatch).
Note: The fix was released upstream only on October 15, so your OS vendor may not have published a patched kernel yet. Please keep an eye on distribution's security tracker for CVE-2026-99999 and update and reboot Compute Resources as soon as the fix is available.
Comments
Please sign in to leave a comment.