OpenAI's own takeaway for defenders: for now, a low-privileged account on an OS that isn't fully patched should be treated as equivalent to root for a well-resourced attacker. Practically, that means shortening kernel patch cycles (including reboots or live patching), reducing who gets shell access on shared hosts, and not relying on local user separation as the main boundary on multi-tenant machines, CI runners and build hosts. Expect a heavier flow of kernel security fixes from distributions as these reports land.