They’re also disabling io_uring in some of their public facing services, chromebooks, etc. The issue is they run a bunch of kernels that are years old, which w

They’re also disabling io_uring in some of their public facing services, chromebooks, etc. The issue is they run a bunch of kernels that are years old, which were missing security backports. There has been one io_uring CVE for the linux 6.x series. That’s worse than zero, but local linux kernel exploits are pretty common. Anyway, this sort of rug pulling for stuff like GKE makes it clear they’re not willing to stand by already-released products. Edit: Also, it’s worth pointing out that the kernels for chromebooks and gke are single-tenant, so, if disabling io_uring really is necessary, it should be a customer controlled knob. If people are running kernel exploits on your laptop / server containers, you’re probably already screwed.