OpenVZ Forum


Home » General » Support » Urgent: GhostLock (CVE-2026-43499) on OpenVZ 7 Where is the patch for WebPros / SolusVM users?
Re: Urgent: GhostLock (CVE-2026-43499) on OpenVZ 7 Where is the patch for WebPros / SolusVM users? [message #53895 is a reply to message #53894] Tue, 14 July 2026 18:48 Go to previous messageGo to previous message
wad486
Messages: 1
Registered: July 2026
Junior Member
Hi @dmc_dtc,
Great work!

We're in the same boat here with no official patches yet. Can you confirm if the PoC actually works on OpenVZ 7? I haven't been able to find any documentation or guide on how to compile or test it. Do you happen to have the steps?

I wanted to check my system's vulnerability based on this article ( https://linuxjust4u.com/linux/ghostlock-cve-2026-43499-linux -futex-root-exploit-fix/), which mentions that running grep CONFIG_FUTEX_PI /boot/config-$(uname -r) should return CONFIG_FUTEX_PI=y.

Interestingly, I get that output on my AlmaLinux 9 hosts, but it returns nothing on OpenVZ 7. I suspect it might just be that the kernel config file isn't stored in /boot/ on OVZ7 by default, rather than the kernel being immune.

Any insights on this would be highly appreciated. Thanks!
 
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: Openvz7 and CVE-2026-31431 (Copy Fail) vulnerability
Next Topic: Forum auto-registration is closed
Goto Forum:
  


Current Time: Mon Aug 24 10:51:44 GMT 2026

Total time taken to generate the page: 0.70520 seconds