Out of an abundance of caution, I am going to bring NAS offline until there is an upstream Linux kernel fix available for CVE-2019-8912.
Note that NAS may be offline for a few days as a result.
Take this time to be with your friends and family OTG-style.