[dwj]

Just checked my servers, and not infected (but neither even have libkeyutils, so I don't think I'm vulnerable to this).

After being burned in the past, I always install iptables and block incoming connections. Plus I only allow ssh access to certain ip addresses. This means that even in the worst case if a vulnerability lets a rootkit get installed, there isn't much they can do after that.