ZDI-CAN-33367: Linux Kernel Local Root Privilege Escalation Copy 1hr 9min ago
Resolved
Security Update | October 24, 2026
Fusion Arc Hosting has completed its security review and successfully verified mitigation measures for ZDI-CAN-33367, a critical Linux kernel local privilege escalation vulnerability that could allow unauthorized root level access.
Security Verification Results:
- All shared hosting infrastructure nodes have been verified as protected against the documented unprivileged-user exploitation path.
- End customer Fully Managed VPS's have been successfully mitigated and verified.
- The recommended
- No server reboots, customer application modifications, or service interruptions were required to implement or verify these protections.
Current Security Status: Mitigated
The documented exploitation path has been blocked across the verified servers. A permanent kernel security patch is still pending vendor availability and deployment.
Fusion Arc Hosting will continue monitoring CloudLinux, AlmaLinux, and KernelCare security releases and will apply applicable permanent fixes as they become available.
Additional Fully Managed VPS/VDS environments, where applicable, remain subject to individual security verification.
We remain committed to proactive infrastructure security, protecting customer environments, and maintaining reliable hosting services.
Thank you for choosing Fusion Arc Hosting.
Security Update | October 24, 2026
Fusion Arc Hosting has completed its security review and successfully verified mitigation measures for ZDI-CAN-33367, a critical Linux kernel local privilege escalation vulnerability that could allow unauthorized root level access.
Security Verification Results:
- All shared hosting infrastructure nodes have been verified as protected against the documented unprivileged-user exploitation path.
- End customer Fully Managed VPS's have been successfully mitigated and verified.
- The recommended
user.maxusernamespaces = 0 restriction is active and persistently configured across all audited servers.- No server reboots, customer application modifications, or service interruptions were required to implement or verify these protections.
Current Security Status: Mitigated
The documented exploitation path has been blocked across the verified servers. A permanent kernel security patch is still pending vendor availability and deployment.
Fusion Arc Hosting will continue monitoring CloudLinux, AlmaLinux, and KernelCare security releases and will apply applicable permanent fixes as they become available.
Additional Fully Managed VPS/VDS environments, where applicable, remain subject to individual security verification.
We remain committed to proactive infrastructure security, protecting customer environments, and maintaining reliable hosting services.
Thank you for choosing Fusion Arc Hosting.