System Version: openEuler 20.03 (LTS)
Vulnerability ID: CVE-2026-31431
Since the minimum version requiring the released patch is openEuler 20.03 (LTS) SP4, is there a patch available for the openEuler 20.03 (LTS) version?
Two repair methods are available; choose one based on your situation:
Method 1: Upgrade Kernel Package Only
- Principle: openEuler 20.03 LTS and openEuler 20.03 LTS SP4 use the same major kernel version (both are 4.19), and their ABI typically remains unchanged.
- Procedure:
- Refer to the security bulletin openEuler Security Bulletin Details | Security Information | openEuler Community Website to confirm which kernel version in openEuler 20.03 LTS SP4 fixes the vulnerability. The version here is
4.19.90-2605.1.0.0370. - Download a kernel version higher than the one specified in the security bulletin from the official repository. For example, download the latest version: kernel-4.19.90-2606.4.0.0377.oe2003sp4.x86_64.rpm.
- Run
rpm -Uvh kernel-4.19.90-2606.4.0.0377.oe2003sp4.x86_64.rpmto install.
- Refer to the security bulletin openEuler Security Bulletin Details | Security Information | openEuler Community Website to confirm which kernel version in openEuler 20.03 LTS SP4 fixes the vulnerability. The version here is
- Note: If kernel-header, kernel-devel, or other kernel development packages were previously installed on the system, they must be upgraded synchronously using the same steps above.
Method 2: Upgrade the Operating System
- Principle: Upgrade openEuler 20.03 LTS to openEuler 20.03 LTS SP4, which will automatically update the kernel package to the latest version.
- Procedure: Refer to the Upgrade Guide | Documentation | openEuler Community.