A hands-on, copy-paste tutorial: identify your running kernel, compare against your distro's fixed version, confirm the actual fix landed in the changelog, run the public PoC safely in a sandbox, and audit your whole fleet with one playbook.