Krystal incident
Kernel Security Mitigation - Dirty Frag 2.0 (ZDI-CAN-33367)
Ongoing since 02:46 PM UTC.
We have applied a temporary security mitigation to our hosting fleet and Managed VPS systems without requiring immediate reboots. We are awaiting a kernel security update for a permanent fix. Most systems are expected to support live patching once the update is available; a small number will require a reboot after the updated kernel is installed.
Update timeline
- investigating Oct 23, 2026, 02:46 PM UTC
We are aware of a critical security vulnerability in the Linux Kernel (ZDI-CAN-33367 - CVE to be assigned). Our team are currently investigating the level of exposure across all of our systems, and what impact this will have on uptime. We expect that at least some systems will need to be rebooted to apply kernel configuration changes. We will keep you updated.
- investigating Oct 23, 2026, 03:04 PM UTC
We have applied a temporary security mitigation to our hosting fleet and Managed VPS systems without requiring immediate reboots. We are awaiting a kernel security update for a permanent fix. Most systems are expected to support live patching once the update is available; a small number will require a reboot after the updated kernel is installed.
Your product runs on more than Krystal
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services