The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to the kernels 3.10.0-862.20.2.vz7.73.29 (Virtuozzo 7.0.9 and Virtuozzo Infrastructure Platform 2.5), 3.10.0-957.10.1.vz7.85.17 (Virtuozzo 7.0.10), and 3.10.0-957.12.2.vz7.86.2 (Virtuozzo 7.0.10 HF1). Vulnerability id: VSTOR-22575 If the amount of free memory is low, OOM killer would kill the tasks from cgroups without memory guarantees first. However, it seems more reasonable to kill the tasks from cgroups which exceed their guarantees the most.
Vulnerability id: VSTOR-23689 Processes could hang while closing a file located on the storage cluster.