In a stunning act of long-term commitment, a Linux kernel vulnerability reportedly introduced in 2010 has emerged from hiding to remind sysadmins that “stable” and “emotionally stable” are two very different things.
The bug, known as Januscape, affects KVM and may allow a malicious virtual machine to escape into the host, which experts describe as “bad,” “very bad,” and “the kind of bad that makes your weekend vanish.”
Even better, some systems may be affected despite not knowingly running virtual machines, because /dev/kvm apparently decided years ago that “world-accessible” was a bold lifestyle choice.
CloudLinux admins are now being advised to patch, livepatch, reboot, unload modules, restrict device permissions, consult the ancient scrolls, and stare silently into the server rack while whispering, “I thought we already did kernel updates this month.”
At press time, KernelCare was seen calmly walking through the data center wearing sunglasses, telling everyone, “I got this,” while traditional reboot windows sobbed quietly into a maintenance calendar.