Security maintenance — virtualization cluster

We're rolling out a precautionary mitigation for a recently disclosed Linux KVM kernel vulnerability — "Januscape" (CVE-2026-53359, and the related CVE-2026-46113). The work is performed as rolling, live-migrated maintenance, so no downtime is expected for most workloads.

As part of this mitigation, we are temporarily disabling nested virtualization. Workloads that rely on nesting — running VMs or virtualization-based features inside a VM — may experience errors or reduced functionality until it's restored.

This measure is temporary. We will revert it and re-enable nested virtualization as soon as the patched kernel update is available. Updates will be posted here.