This isn't Linode getting attacked, it is telling customers that this zero click RCE CVE is pretty serious. You should patch ASAP.
Did you know that GO defaults to listening on TCP connections with MPTCP, so anyone running GO programs listening on the internet (Caddy, traffic, etc) and are on an unpatched kernel now have a way to from attackers to get root on that box?
Even if you're not using MPTCP, this functions as a DOS attack.
It's a very bad CVE, so yes. Follow the advisor and patch.
Did you know that GO defaults to listening on TCP connections with MPTCP, so anyone running GO programs listening on the internet (Caddy, traffic, etc) and are on an unpatched kernel now have a way to from attackers to get root on that box?
Even if you're not using MPTCP, this functions as a DOS attack.
It's a very bad CVE, so yes. Follow the advisor and patch.