CVE-2026-99999, a critical vulnerability in the Linux kernel, was publicly disclosed on 15 October 2026. We have been tracking it since publication.

Essential information

• The vulnerability is rated Critical (CVSS 9.3).
• It affects the Linux kernel on all VPS and VDS host systems. 
• To protect your services and data, we are rolling out security patches as quickly as possible.

What this means for you

Applying the patch requires a reboot of the host, so please expect a temporary restart of your VPS or VDS. Because of the critical severity and the number of hosts involved, patching can’t wait for a regular maintenance window, and we can’t send individual advance notices. We are keeping interruptions as short as possible.

Why we are acting now

We know unplanned downtime is disruptive, and we don’t take it lightly. However, leaving a critical vulnerability open would put your services and data at far greater risk than a short reboot. Protecting our customers comes first.

What you can do

• Make sure to have recent backups of important data.

• Make sure that applications and services are set to start automatically after a reboot, and check them once the server is back online.

Progress updates are published on our status page.