Vultr security patch announcement

jtk

Vultr is sending out "Urgent: Security Patch" emails, something I don't recall seeing them do before.

A Linux exploit has been discovered that poses a direct risk to virtualized environments worldwide. To safeguard your workloads and data, we must act immediately.
Our security team is applying critical security patches across our infrastructure. No action is required on your part.

Patches are going out on 2025-09-25. It is not clear what specific vulnerability they are referring to, but presumably something kernel-related. Maybe not a new vulnerability and they are just deploying a fix now? Anyone have any ideas what this might be in response to?

somik

Maybe this one?
https://www.wiz.io/vulnerability-database/cve/cve-2025-40300

Risk-V also has issues...
https://www.wiz.io/vulnerability-database/cve/cve-2025-39815

jtk

@somik said:
Maybe this one?
https://www.wiz.io/vulnerability-database/cve/cve-2025-40300

That's it, thanks.