Kernel: "Copy Fail", "Dirty Frag" & "GhostLock" CVEs patched

Addendum 12 Jul 2026 23:36 AEST

Please note we’ve upgraded all CloudLinux kernels to 4.18.0-553.141.2.lve.el8.x86_64 to patch:

“GhostLock” CVE-2026-43499 (CVSS 3.x: 7.8 HIGH) https://nvd.nist.gov/vuln/detail/CVE-2026-43499

Addendum 11 Jul 2026 0:16 AEST

We’re slowly testing & rolling out Kernel 4.18.0-553.141.2.lve.el8.x86_64 to patch “GhostLock”.

As this is currently in CloudLinux’s testing release channel we’re ensuring stability through corporate firstly.

Informatie 11 May 2026 12:00 AEST

G’day,

Please note we’ve upgraded CloudLinux kernels to 4.18.0-553.123.2.lve.el8.x86_64 to patch both:

“Copy Fail” CVE-2026-31431 (CVSS 3.x: 7.8 HIGH) https://nvd.nist.gov/vuln/detail/CVE-2026-31431
“Dirty Frag” CVE-2026-43284 / 43500 (7.8 HIGH) https://nvd.nist.gov/vuln/detail/CVE-2026-43284

The upgraded kernels (in runtime via reboot) now take over from KernelCare live patching updates before.

We’ve waited until these were pushed to stable and not subsequently revoked, which is now the case.

Please let us know if you’ve any concerns with regard to these security upgrades and reboots.

Now we’re in the AI era (look up “Project Glasswing” etc), expect more CVEs to drop soon.

Cheers,
Merlot Digital