Has the 22.03 LTS system kernel patched the following vulnerabilities?

O&M Operations
1

Hello teacher,

Vulnerability Name 1: CopyFail

CVE ID: CVE-2026-31431

Vulnerability Name 2: DirtyFrag

CVE ID: CVE-2026-43284 / CVE-2026-43500

Vulnerability Name 3: Fragnesia

CVE ID: CVE-2026-46300

Have these three vulnerabilities been resolved in version 22.03 LTS, or are they not applicable? If they have not been resolved, can we perform an online upgrade to SP4?

2

You can check the openEuler Security Center website: openEuler Security Bulletin | openEuler Security Center | openEuler Community Official Website

CVE-2026-31431: openEuler CVE 漏洞详情 | 安全信息 | openEuler社区官网

CVE-2026-43284: openEuler CVE 漏洞详情 | 安全信息 | openEuler社区官网

CVE-2026-43500: openEuler CVE 漏洞详情 | 安全信息 | openEuler社区官网

CVE-2026-46300: openEuler CVE 漏洞详情 | 安全信息 | openEuler社区官网

3

Thank you, teacher. I’ve checked those links before, and they only mentioned that the 22.03 SP4 version was fixed, without mentioning LTS. I guess I might need to reinstall the SP4 operating system, but I’m not sure.

4

The openEuler 22.03 LTS version has reached end-of-life, so no corresponding patch package has been released.

However, both openEuler 22.03 LTS and openEuler 22.03 LTS SP4 use the 5.10 kernel, sharing the same major version. You may try upgrading to the SP4 kernel, but it’s more reliable to upgrade the entire system to SP4: configure the SP4 repository source and run yum update. For reference, see the Upgrade Guide | Documentation | openEuler Community.

5

Thank you, teacher :folded_hands:

6

Teacher, if this version is no longer maintained, does that mean we can’t fix these vulnerabilities on 22.03 LTS, and we’ll have to upgrade to SP4 instead?

7

You can also upgrade just the kernel package—choose based on your preference.

8

OK, teacher, I’ll try it first and come back if I have any questions.

9

Teacher, I’ve attempted to upgrade the test environment and ran the diagnostic commands, but the vulnerabilities CVE-2026-31431 and CVE-2026-43284 still exist.

image
image1152×475 30.1 KB

10

You can open an issue in the official repository, describe the detailed testing procedure, and let the experts take a look.
issues - openEuler/kernel - AtomGit | GitCode