At myshophosting, the security of your websites, email, and data is always our top priority. We take a proactive approach to protecting our customers, and this week was no exception.

Our Response to CVE-2026-46333

Right after the kernel privilege-escalation chain in the XFRM/ESP subsystem (Copy Fail, Dirty Frag, Fragnesia), Qualys disclosed a different Linux kernel issue. This time in the ptrace access-check path. CVE-2026-46333 is reserved for tracking this vulnerability.

Here’s how we responded:

  • 16th May 2026 – Mitigations in place across all myshophosting servers
  • 18th May 2026 – 9:30AM AEST – Our Alma Linux servers have been patched. We are still waiting on patches for our Cloud Linux servers.
  • This blog post will be updated once kernel patches are available

References:

https://blog.cloudlinux.com/ptrace-exit-race-cve-2026-46333-mitigation-and-kernel-update