The good news is there's already a patch. The bad news is that the fix isn't available for all Linux distributions yet.
An even more locked-down version of the foundation most users never see.