This is a quick update to let you all know that Fly Machines’ kernel has been updated to v6.12.91. This update addresses the DirtyFrag and Fragnesia local privilege escalation (LPE) vulnerabilities.
New and updated machines have been booting on the new kernel since May 25. The rollout was completed incrementally and finished on June 2.
If your machine is not already running the latest kernel, a machine update or application deploy is sufficient to trigger the upgrade.
One last note: CopyFail was already addressed in the previous kernel update, v6.12.87.
In case anyone else hits this: I had an older Machine fail to start with an error related to this kernel, and a redeploy plus another manual fly machine start got it going.
More specifically,
I couldn’t machine start a GPU Machine (an Ollama) that hadn’t been started in some weeks, with this in logs:
[info]ERROR Error: an unhandled error occurred: Module is not provided by 6.12.91-fly kernel
A fresh deploy stopped logging after
[info]Configuring cloudhypervisor
And the Machine stayed stopped (I’m 99% sure it didn’t just start without logging). A deliberate fly machine start a few minutes later did get it up and running.