The scheduled maintenance operations on the Marseille VPS infrastructure are complete.

One node in the MRS04 cluster did not restart correctly. This issue affects a small number of Performance VPS instances and is tracked in a separate incident.

Maintenance has started as scheduled.

We inform you that a maintenance operation is scheduled on all clusters of our VPS ranges hosted at our Marseille POP, in order to apply an urgent security patch (CVE-2026-99999).

Date:

• Wednesday, October 21: From 21:00 to 23:00

This maintenance campaign aims to deploy an urgent security patch, following the discovery of a critical security vulnerability in the Linux kernel, affecting all Linux servers since kernel 2.6.27 (which dates from 2008).

We are aware of the relatively high number of impactful maintenance operations in recent months: These operations are explained by the recent and close discovery of several critical vulnerabilities affecting the Linux kernel, as well as the KVM technology, used for the virtualization of VPS offerings by almost all hosting providers on the market.

A similar operation is planned for our other locations: We will observe a 24-hour delay between each location, to avoid the risk of multiple impacts for customers who have chosen to multiply locations for redundancy reasons.

During this campaign, each VPS located at our Marseille POP will be restarted once, during the previously indicated time slot. Given the urgent nature of this maintenance and the short notification period, our team will endeavor to send an email notification, approximately 48 hours in advance, for each VPS, specifying the time slot when the VPS will be impacted.

The affected VPS will be shut down for a maximum estimated duration of 15 minutes during the scheduled time slot, then restarted.

In the vast majority of cases, no action is required on your part, but we nevertheless invite you to:

• Check that your applications installed on the VPS are correctly configured to operate after a restart;
• Check the status of your backups (we nevertheless insist that no data loss is expected, the VPS will simply be shut down, then restarted);
• As far as possible, gracefully suspend your activity before 21:00, during the time slot communicated by email, particularly if you host applications sensitive to restarts (databases, etc.).

Additional note related to CVE-2026-99999: This vulnerability in the Linux kernel affects a very large number of OSes (Debian, Ubuntu, etc.) since 2008. We strongly invite you to check that your OS is up to date to ensure that it is itself protected against this vulnerability. This vulnerability is fixed starting from the following kernels: 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.57 and 7.2.11. More info at https://nvd.nist.gov/vuln/detail/cve-2026-99999

We thank you for your understanding.