SAP kernel bug, CVSS 10, has "fight for patching downtime asap" written all over it. Who's affected?