• host1199.rimuhosting.com

Tue, 7 Jul 2026 04:10 AM UTC: Remote hands were unable to resolve the rack issue without causing downtime. We have scheduled a window for this change as below.

Start: 8pm Dallas time on the 13th July
Maintenance duration: Approx 1 hour, expected VPS downtime ~30 minutes.

Customers have the option to move their VPS to an alternate host prior to the window. This can be done from our control panel at any time. Our team is avilable to assist if needed.

host1199.rimuhosting.com requires a physical rack adjustments to secure it better. We are working on that. No downtime is expected.

A newly disclosed flaw in the Linux kernel's traffic-control subsystem, now assigned CVE-2026-46331 and referred to as “Pedit COW,” .

https://gbhackers.com/critical-linux-kernel-flaw-2/

It can grant any unprivileged local user full root access on vulnerable systems. If an actor can run code inside a vulnerable server, for example through a compromised website, shell account, or application, this bug may allow them to have unrestricted server access.

Over the last month or two there have been a handful of similar exploits.  This is partly a result of AI-powered work going into finding bugs and improving the kernel.

VM restarts

Due to the severity of the issue we will attempt to restart affected VMs where we are able to boot them onto a patched kernel.

You can run these restarts yourself or disable the restarts or schedule when they run over using our 'server patch' tool at:
https://rimuhosting.com/cp/serverpatchstate.jsp

FYI we wrote a a blog post about how this tool is used.

Mitigations

Where a server is using a modular kernel - e.g. if you boot a VM with pvgrub - you should check with the distributor as soon as possible for updates and additional mitigation steps.

On RimuHosting VPSs, it is possible to disable this attack by setting the following ...

sysctl -w user.max_user_namespaces=0

This temporary fix may have a broader impact, you should test your workloads still operate normally after making this change.

Fixed kernels

We are releasing VM kernels to our hosts with the affected component disabled. For 4.14 and later. A reboot will be required to use those. Please use our kernel selector in our control panel to action that.

• Kernel selection page: https://rimuhosting.com/cp/vps/kernel.jsp

You can verify which kernel your VM is running using the command 'uname -r', it will look something like this...:

6.12.0-really95-rh-20260705204515.xenU.x86_64

Fixed kernels will show a build date of 20260705 or newer. Those digits are the date: 2026-07-05.

For 4.14 kernels the PEDIT option was disabled in 20260630 and that kernel is not receiving further updates.  It is recommended you try a newer kernel, e.g. 5.10.

Ongoing work

We are continuing to review this vulnerability, and will be providing updates and further recomendations here. Please subscribe to this notice for updates.

As part of the Dallas network upgrade and ongoing infrastructure improvements, we will be working with the upstream provide to move the transit uplinks.

Maintenance Window:
Start: 9 July 2026, 16:00 Dallas local time
End: 9 July 2026, 22:00 Dallas local time

Impact:
No customer impact is expected.
This uplink is part of our redundant Dallas network design, so traffic is expected to continue routing normally via the available redundant paths during the work. We will monitor routing and connectivity throughout the maintenance window.

A newly disclosed flaw in the Linux kernel's traffic-control subsystem, assigned CVE-2026-46242, and known as Bad Epoll.

https://github.com/J-jaeyoung/bad-epoll

Bad Epoll (CVE-2026-46242) is a race-condition use-after-free in the Linux kernel's epoll subsystem. This bug lets an unprivileged process potentially become root. It only affects 6.4 or newer kernels.

At this time, we are not aware of any active attacks using this vector.

Mitigations

There are no known mitigations at this time. The bug is in part of the kernel core that is always built in.

Fixed kernels

We are releasing updated VM kernels for 6.6, 6.12, and 6,18. A reboot will be required to use those. Please use our kernel selector in our control panel to action that.

• Kernel selection page: https://rimuhosting.com/cp/vps/kernel.jsp

You can verify which kernel your VM is running using the command 'uname -r', it will look something like this...:

6.18.0-really38-rh-20260705204512.xenU.x86_64

Fixed kernels will show a build date of 20260705 or newer. Those digits are the numerical date: 2026 July 6th.

Ongoing work

We are continuing to review this vulnerability, and will be providing updates and further recomendations here. Please subscribe to this notice for updates.

Our Sydney site team is completing power maintenance in the following window

Start time: 27 July 2026, 07:00 AEST
End time: 27 July 2026, 17:00 AEST

Detail the site will be running on generator (mains bypass) while annual inspection is completed.

One of our service providers will be doing electrical maintenance and transferring power to their generators. This should cause no downtime due to the high availability setup of the data center

Maintenance Window:
Start: 18 July 2026, 07:00 Dallas local time
End: 18 July 2026, 13:00 Dallas local time

Maintenance has been postponed as per below dates and times.

One of our service providers is doing maintenance on their routers that will include minor outage of no longer than 15 minutes on their side.

Maintenance Window:
Start: 14 July 2026, 00:00 AEST
End: 14 July 2026, 06:00 AEST

No downtime is expected during this maintenance. Customers may notice route path changes, but services are expected to remain available.

• host1199.rimuhosting.com
• host1440.rimuhosting.com
• host1433.rimuhosting.com
• host1175.rimuhosting.com
• host1174.rimuhosting.com
• host1172.rimuhosting.com
• host1170.rimuhosting.com
• host1169.rimuhosting.com
• host1168.rimuhosting.com
• host1166.rimuhosting.com
• host1165.rimuhosting.com
• host1145.rimuhosting.com
• host1142.rimuhosting.com
• host1141.rimuhosting.com
• host1139.rimuhosting.com
• host1137.rimuhosting.com
• host1138.rimuhosting.com
• host1136.rimuhosting.com
• host1135.rimuhosting.com
• host1133.rimuhosting.com
• host1132.rimuhosting.com
• host1131.rimuhosting.com
• host1130.rimuhosting.com
• host1134.rimuhosting.com
• host976.rimuhosting.com
• host1400.rimuhosting.com
• host1236.rimuhosting.com
• host1237.rimuhosting.com
• host1009.rimuhosting.com
• host1403.rimuhosting.com
• host1240.rimuhosting.com
• host1203.rimuhosting.com
• host1241.rimuhosting.com
• host977.rimuhosting.com
• host1458.rimuhosting.com
• host1408.rimuhosting.com
• host1040.rimuhosting.com
• host978.rimuhosting.com
• host1113.rimuhosting.com
• host1273.rimuhosting.com
• host1451.rimuhosting.com
• host1411.rimuhosting.com
• host1018.rimuhosting.com
• host1019.rimuhosting.com
• host1020.rimuhosting.com
• host1402.rimuhosting.com
• host1412.rimuhosting.com
• host1452.rimuhosting.com
• host233.rimuhosting.com
• host242.rimuhosting.com
• host1410.rimuhosting.com
• host1409.rimuhosting.com
• host1074.rimuhosting.com
• host1073.rimuhosting.com
• host1072.rimuhosting.com

As part of our ongoing infrastructure improvement work, our team will be relocating switches within the racks at our Dallas datacenter.

This work is being carried out to improve the physical rack layout. It will help us prepare the racks for future network upgrades and capacity improvements.

Maintenance Window:
Start: 7 July 2026, 15:00 Dallas local time
End: 7 July 2026, 19:00 Dallas local time

Impact:
Services connected through the affected racks may experience a short network outage of up to 10 minutes while the switches are being moved. We will work to minimise disruption, and some services may not experience any outage.