• 🇦🇺 Melbourne, Australia
• 🇨🇦 Toronto, Canada

Want capacity in one of the new regions? → Contact

You can now upgrade Kubernetes cluster versions directly from the Latitude.sh dashboard. When a newer Rancher RKE2 version is available, the dashboard displays an upgrade indicator and lets you start the upgrade in a few clicks.

Upgrades can be triggered from two locations:

• Cluster Details sidebar: An "Upgrade..." button appears next to the version when an upgrade is available
• Settings page: The Version action item shows "Upgrade available" status

Before upgrading:

• Cluster must be provisioned: The upgrade option only appears when your cluster is in the "Provisioned" phase
• Upgrades are irreversible: A confirmation modal displays the current and target versions before proceeding

Once confirmed, the upgrade starts immediately.

We have applied a security mitigation for CVE-2026-31431 (CopyFail vulnerability) across all supported server images. The following operating systems now include this fix:

• Debian 12
• Debian 13
• Ubuntu 22.04
• Ubuntu 24.04
• Ubuntu 26.04

The mitigation blacklists the affected kernel modules at boot and prevents them from loading. No customer action is required. Newly deployed servers automatically include this protection.

Workaround for Existing Servers

For servers deployed before this update, you can manually apply the mitigation by disabling the algif_aead kernel module. We recommend this workaround for all Linux distributions.

Run the following commands as root:

12
echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf
rmmod algif_aead 2>/dev/null || true

This works on all major distributions:

• Debian family: Debian, Ubuntu
• Red Hat family: RHEL, AlmaLinux, Rocky Linux
• SUSE family: SUSE, openSUSE
• Other distributions: Arch Linux, Gentoo, Amazon Linux, Oracle Linux

The first command prevents the module from loading on future boots. The second unloads it immediately if it's currently loaded.

Rocky Linux 10, codename Red Quartz, is now available for all bare metal instances across all regions.

Deploy now

RKE2 clusters on bare metal. No VMs. No hypervisor overhead.

• Highly available control plane
• Workers scalable via dashboard or API
• Instant kubeconfig on provision
• LoadBalancer IPs included
• Standard kubectl — no lock-in

Start deploying → · Docs →