Well, That Wasn't Fun: October 16 '26
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Fly.io's Daniel Botha describes how the company patched and rebooted its entire fleet on October 16, 2026, in response to Linux kernel bug CVE-2026-99999, a flaw in IPv4 checksum offload handling that let guests manipulate host packet headers and leak memory.