We have applied a security mitigation for CVE-2026-31431 (CopyFail vulnerability) across all supported server images. The following operating systems now include this fix:

• Debian 12
• Debian 13
• Ubuntu 22.04
• Ubuntu 24.04
• Ubuntu 26.04

The mitigation blacklists the affected kernel modules at boot and prevents them from loading. No customer action is required. Newly deployed servers automatically include this protection.

Workaround for Existing Servers

For servers deployed before this update, you can manually apply the mitigation by disabling the algif_aead kernel module. We recommend this workaround for all Linux distributions.

Run the following commands as root:

12
echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf
rmmod algif_aead 2>/dev/null || true

This works on all major distributions:

• Debian family: Debian, Ubuntu
• Red Hat family: RHEL, AlmaLinux, Rocky Linux
• SUSE family: SUSE, openSUSE
• Other distributions: Arch Linux, Gentoo, Amazon Linux, Oracle Linux

The first command prevents the module from loading on future boots. The second unloads it immediately if it's currently loaded.

Rocky Linux 10, codename Red Quartz, is now available for all bare metal instances across all regions.

Deploy now

RKE2 clusters on bare metal. No VMs. No hypervisor overhead.

• Highly available control plane
• Workers scalable via dashboard or API
• Instant kubeconfig on provision
• LoadBalancer IPs included
• Standard kubectl — no lock-in

Start deploying → · Docs →

Two operating systems are no longer available for new deployments:

• Ubuntu 20.04 LTS — This version has reached end of life. Use Ubuntu 22.04 LTS or Ubuntu 24.04 LTS instead.
• Windows Server — Windows operating systems are no longer offered on the platform.

Existing servers running these operating systems will continue to function normally. Only new deployments are affected.

Ubuntu 26.04 is now available for bare metal servers.