OVH reveals semi-secret plan to fix critical Januscape bug with mass reboots – and an Australian crash-test dummy

Summary

virtualization OVH reveals semi-secret plan to fix critical Januscape bug with mass reboots – and an Australian crash-test dummy French cloud backported a patch into Debian and didn’t seek customer consent, despite chance of downtime French cloud operator OVH has revealed it used its Sydney, Australia, datacenter as the crash test dummy to test a rapid rollout of a fix for the critical Januscape guest-host escape bug in the Linux kernel-based virtual machine (KVM).Januscape, aka CVE-2026-53359, allowed attackers with root access to a guest VM to execute code as root on the host, crash that machine, or take over all other guest VMs.A widespread guest-host escape exploitation is a nightmare scenario, because many major clouds use KVM to slice their servers into virtual machines and then rent those guests to clients. The prospect of attackers accessing one tenant’s VM and using it to crash other guests or an entire host is therefore a terrifying violation of cloud operators’ promise to run customer workloads in splendid isolation. Fixing it was therefore a priority. On Monday, French cloud OVH’s CISO Julien Levrard revealed how the company handled the emergency patch job on tens of thousands of hosts that run approximately a million virtual machines, in a lengthy post that offers an unusually detailed and candid account of how clouds cope with major security incidents.One way to mitigate the bug was to disable nested virtualization by creating a two-line config file on each host running Linux KVM. That wasn’t an option because OVH has no way to see if its tenants need nested virtualization and relies on it to shift VMs to different physical hosts. Nor was applying a live patch palatable, as it could introduce instability. Live migration to patched hosts was another option, but one OVH rejected as the process is slow and the company felt it might take months to move its entire fleet of tenant VMs to a Januscape-free environment.The company therefore decided to backport ...