SporeStack Blog

Host Reboots for Januscape

Expect Vultr hosts (and thus VPSs) to be rebooted in the very near future!

Some of you may be aware of Januscape (CVE-2026-53359), an escape to host vulnerability in KVM, used for virtualization under Linux.

This is an extremely serious vulnerability for anyone in the VPS world that's on KVM (most of them as far as I know!)

Some of you may have noticed that SporeStack EU VPSs were already restarted. I have received numerous emails from Vultr scheduling host reboots. So far, the dates I have seen are all tomorrow, the 17th (UTC time.)

Thus, I would expect that if you have a server hosted on Vultr (a lot of you!) that it will be rebooted unexpectedly very soon.

I have no simple way to do notifications for this about when that window will be. If this is important to you, let me know ASAP and I'll see if I can tell you when the window is, if I have it already. I can't request that the window be moved or anything like that.

I don't know if this will happen to DigitalOcean or not. I would assume that it will, though it's possible that they may use a live migration metholodgy to work around it.

If you have any questions, please let me know!