# What happens when a vulnerability is found in the version of the kernel my Fly machine runs?

**URL:** <https://community.fly.io/t/what-happens-when-a-vulnerability-is-found-in-the-version-of-the-kernel-my-fly-machine-runs/24037>\
**Category:** General\
**Tags:** security, login-only\
**Created:** [February 25, 2025, 11:13am UTC](https://community.fly.io/t/what-happens-when-a-vulnerability-is-found-in-the-version-of-the-kernel-my-fly-machine-runs/24037 "2025-02-25T11:13:59Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![QuantumImpulse](https://avatars.discourse-cdn.com/v4/letter/q/a587f6/32.png) [@QuantumImpulse](https://community.fly.io/u/QuantumImpulse)\
**Post date:** [February 25, 2025, 11:13am UTC](https://community.fly.io/t/what-happens-when-a-vulnerability-is-found-in-the-version-of-the-kernel-my-fly-machine-runs/24037/1 "2025-02-25T11:13:59Z")

</div>

Haven’t found my answer in the documentation or the forum…

Does Fly restart the machine automatically with a new kernel?

Do I get a notification to restart the machine?

Also in general - do Fly machines have their kernel versions pinned? In other words, if I restart a Fly machine, does it pick up the latest kernel made available by Fly automatically or do I have to destroy and recreate a machine to get that?

---

<div class="post-metadata">

**Author:** ![QuantumImpulse](https://avatars.discourse-cdn.com/v4/letter/q/a587f6/32.png) [@QuantumImpulse](https://community.fly.io/u/QuantumImpulse)\
**Post date:** [February 25, 2025, 11:16am UTC](https://community.fly.io/t/what-happens-when-a-vulnerability-is-found-in-the-version-of-the-kernel-my-fly-machine-runs/24037/2 "2025-02-25T11:16:21Z")

</div>

Hmm, just after posting I found this sentence in [Healthcare apps on Fly · Fly Docs](https://fly.io/docs/about/healthcare/#kernel-vulnerability-response)

> [Fly.io](http://Fly.io) is responsible for the security both of our host kernels (of course) and of the guest kernels our apps run in; one less thing for you worry about.

But how does this work out operationally?

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/fly1/original/3X/6/e/6e8955d00cb218e186ebbe3a6ab06fefdce15290.svg) [@system](https://community.fly.io/u/system)\
**Post date:** [March 4, 2025, 7:13pm UTC](https://community.fly.io/t/what-happens-when-a-vulnerability-is-found-in-the-version-of-the-kernel-my-fly-machine-runs/24037/4 "2025-03-04T19:13:40Z")

</div>

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.