... why does your keyboard appear to have a gnss module?

Just did a cursory read of the commits related to security for this release, and my assumpion based solely on the changes, is that it's not a remote-access vulnerability, but a supply-chain-esque vulnerability where a video you downloaded from a questionable source might trigger code embedded in the metadata to be run by jellyfin.

Do you have multiple NIC? I sporadically run into issues where traffic will try to route itself via a secondary network which has limited external access and it is resolved in a similar manner, by bringing down all networks, then re-starting them in a specific order.

Realistically I should probably define some static routes, but it works automatically 99% of the time so I never bother.

If this sounds like a possible cause, check your routes while in failed, and functional states, and set static routes as needed to resolve.

My money is on Putin knowing that his war is not winnable, but not being able to save face internally by admitting as such. If he can poke the bear enough with incursions into NATO countries like the last few days though, he might be able to draw NATO into direct conflict, at which point a withdrawal/surrender can be sold as "We were attacked by the big bad NATO and had to consolidate our local defenses" rather than a defeat by what should have been an inferior force.