Kernel Os — 1809 1.3

That afternoon, the security team disclosed an elevation-of-privilege exploit discovered by an external tester. It exploited a permissive ioctl code path introduced to support advanced container checkpointing. The patch to close it was surgical: two guard checks, one reordered memory barrier, a test added to CI. Still, the announcement rippled outward—partners who depended on 1809’s new live-migration hooks paused upgrades.