5 min
Three CISA KEV kernel CVEs: patching CloudLinux servers now
CISA lists CVE-2025-39964, CVE-2026-53266, and CVE-2025-39682 as exploited in the wild. Per-branch CloudLinux status, kernel builds, livepatches, and the one mitigation.
2026-10-15
5 min
bridge-stp-uaf (CVE-2026-72389): the CloudLinux kernel advisory
A use-after-free in the kernel bridge STP timer code lets a local user who can configure a network bridge become root. CloudLinux 7h and 8 need the modprobe mitigation now.
2026-09-11
5 min
RtabRace (CVE-2026-68138): mitigating the kernel race on CloudLinux
A traffic-control race in the Linux kernel lets any shell user panic a shared server on demand. CloudLinux 8 and 7 Hybrid need the sysctl mitigation today — here's the command and the patch status.
2026-08-18
5 min
Live patching options for hosting fleets compared
KernelCare, Oracle Ksplice, and scheduled reboot windows compared for hosting fleets on coverage, cost, and operational fit.
2026-05-16
6 min
How to install CloudLinux OS on an existing cPanel server
Convert a CentOS, AlmaLinux, or Rocky cPanel server to CloudLinux OS in place — license activation, cldeploy, CageFS, and verifying the lve kernel after reboot.
2026-05-15