We're a Swiss managed hosting provider. On April 30 a Linux kernel 0-day (local root via a few lines of Python) dropped with no patched kernel available yet for our Ubuntu fleet. This is a write-up of how we handled it, what worked, and what we'd do differently. Happy to answer questions.