For the record - we waited to make be sure the problem could actually be used to cause reboots/kernal panics on our OpenVZ host nodes before having to do emergency maintenance. We were going to give everyone some more notice, but it turned out to be necessary to apply a permanent fix quickly.