How Clever Cloud responds to kernel vulnerabilities (opens in new tab)

Several recent Linux kernel vulnerabilities have required a swift response from infrastructure operators. Among them, and drew attention because they involve local privilege escalation scenarios. Copy Fail is tracked as Dirty Frag covers two distinct vulnerabilities, At Clever Cloud, we treated these vulnerabilities as critical infrastructure matters. Our goal was twofold: quickly shrink the exposure window, then sustainably improve our kernel selection and deployment process. This article re...