A newly disclosed flaw in the Linux kernel's traffic-control subsystem, now assigned CVE-2026-46331 and referred to as “Pedit COW,” .

https://gbhackers.com/critical-linux-kernel-flaw-2/

It has been found to grant any unprivileged local user full root access on vulnerable systems. If an actor can run code inside a vulnerable server, for example through a compromised website, shell account, or application, this bug may allow them to have unrestricted server access.

Mitigations

Where a server is using a modular kernel, you should check with the distributor as soon as possible for updates and additional mitigation steps.

On RimuHosting VPSs, it is possible to disable this attack by setting the following ...

sysctl -w user.max_user_namespaces=0

This temporary fix may have a broader impact, you should test your workloads still operate normally after making this change.

Fixed kernels

We are releasing VM kernels to our hosts with the affected component disabled. For 4.14 and later. A reboot will be required to use those. Please use our kernel selector in our control panel to action that.

• Kernel selection page: https://rimuhosting.com/cp/vps/kernel.jsp

You can verify which kernel your VM is running using the command 'uname -r', it will look something like this...:

6.12.0-really94-rh-20260630114817.xenU.x86_64

Fixed kernels will show a build date of 20260630 or newer. Those digits are the numerical date: 2026 June 30th.

Ongoing work

We are continuing to review this vulnerability, and will be providing updates and further recomendations here. Please subscribe to this notice for updates.

One of our service providers will be making major network upgrades in our Dallas datacenter. Unfortunately this may affect some users for up to 15 minutes within the below maintenance times.

Maintenance Window:
Start: 01 July 2026, 01:00 Dallas local time
End: 01 July 2026, 07:00 Dallas local time

Detail: Our upstream network provider is replacing equipment that we are directly connected to. We have been advised that those connections will be moved together to the new stack, causing a short outage while they are disconnected and reconnected. The change is being conducted this way to mitigate complexity and allow for easy rollback to the old connection.

Maintenance has been postponed as per below dates and times.

One of our service providers is doing maintenance on their routers that will include minor outage of no longer than 15 minutes on their side.

Maintenance Window:
Start: 14 July 2026, 00:00 AEST
End: 14 July 2026, 06:00 AEST

No downtime is expected during this maintenance. Customers may notice route path changes, but services are expected to remain available.

22:00 24 June 2026 UTC: The maintenance window has been extended to allow additional time for coordination and completion of the provider-side network changes. New End: 25 June 2026, 11:00 UTC

As part of the ongoing migration work for prefix 43.239.99.0/24, our team will be performing network changes to progress the migration of this prefix.

Maintenance Window:
Start: 24 June 2026, 21:00 UTC
New End: 25 June 2026, 11:00 UTC

Impact:
Services within 43.239.99.0/24 may experience a brief disruption of up to 10 minutes during the maintenance window.

The frankfurt data center has scheduled maintenance on its power services. As part of the annual manufacturer-recommended maintenance program, redundant UPS modules will be inspected and serviced sequentially. These activities are intended to ensure the operational reliability, availability, and long-term functionality of the UPS system.

Start: 01.07.2026 - 12:00 CEST
End: 02.07.2026 - 17:00 CEST

No interruption of the power supply is expected during the maintenance.

• host998.rimuhosting.com
• host1263.rimuhosting.com

Update: All VPS moves are completed as described below. If you see any issues please let us know.

Your Brisbane VPS is scheduled to be moved to our Sydney data centre as part of infrastructure improvements.

This is scheduled to start from Tuesday 30th June from 7am AEST.

For servers with an IP address starting with 43.239.99, the IP will remain the same. We will be reserving new IPs for customers not in that range and sending details seperately.

Customers may initiate the move ahead of the scheduled date, via our customer portal. Simply log in to our portal and follow the prompts to move the VPS to a host at any of our sites, at a time that suits you.

Where we manage DNS for you on our name servers, we will update the relevant records to reflect any IP address changes.

We appreciate your patience as we carry out this change. If you have any questions or need assistance, please contact our support team at https://rimuhosting.com/ticket/enterticketdetails.jsps.jsp

• host1075.rimuhosting.com

Thu, 25 Jun 2026 20:55 PM UTC: All activities complete

host1075.rimuhosting.com requires routine maintenance. To minimise customer disruption we will be moving VPSs running there to an alternate host.

Scheduled: from 10am 25th June UTC (4am Dallas)

Detail: One at a time, VPSs will be stopped, the filesystem moved to an alternate host, and then restarted on the new host. Moves will take roughly 1min/GB of disk.

• host1105.rimuhosting.com

Thu, 25 Jun 2026 20:55 PM UTC: All activities complete

host1105.rimuhosting.com requires routine maintenance. To minimise customer disruption we will be moving VPSs running there to an alternate host.

Scheduled: from 4am 25th June UTC (10pm Dallas)

Detail: One at a time, VPSs will be stopped, the filesystem moved to an alternate host, and then restarted on the new host. Moves will take roughly 1min/GB of disk.