Ops One AG platform status and maintenance announcements. Times are indicated in local Swiss time. https://opsone.ch/.

Friday 8th May 2026

Managed Server 8/9/10: Dirty Frag Kernel Vulnerability

The Dirty Frag vulnerability can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write vulnerability and the RxRPC Page-Cache Write vulnerability.

  • As of now, patched kernel versions are not released yet
  • To mitigate this issue at this time, we implemented a workaround on the affected systems

We will test and install the required patches as soon as they're released by Debian. We will announce this as usual as soon as the update is ready.