银河麒麟V10 2503尽快修复Linux 内核Dirty Frag高危漏洞!

漏洞编号:CVE-2026-43284、CVE-2026-43500

漏洞描述：Dirty Frag是一类Linux内核本地提权漏洞，其核心原理是利用 splice()系统调用在零拷贝发送路径中，将攻击者仅有读取权限的文件页缓存(page cache page)植入内核skb的非线性frag区域；随后在接收端进行原地(in-place)加解密操作时，对该页缓存实施写入，从而实现权限提升。该漏洞由CVE-2026-43284(xfrm-ESP 页面缓存写入漏洞)、CVE-2026-43500(RxRPC 页面缓存写入漏洞)两个子漏洞组合构成。

修复方法：

方法一：升级安装

在终端执行更新命令进行升级

$sudo apt update

$sudo apt install linux-generic

方法二：图形界面系统更新补丁

1.获取系统更新补丁

在设置-更新页面，获取最新系统更新补丁。

2.安装更新补丁

单击更新按钮，下载系统更新补丁，并按照提示重启系统安装更新。

方法三：下载软件包进行升级安装

通过软件包地址下载软件包，使用软件包升级命令根据受影响的软件包列表升级相关的组件包。

$sudo apt-get install /Path1/Package1 /Path2/Package2 /Path3/Package3……

注：Path 指软件包下载到本地的路径，Package指下载的软件包名称，多个软件包则以空格分开。

软件包下载地址

银河麒麟桌面操作系统V10 SP1 2503arm64软件包下载地址https://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/n/nvidia-graphics-drivers/nvidia-dkms-closed_470.256.02-0kylin1_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/n/nvidia-graphics-drivers/nvidia-graphics-driver_470.256.02-0kylin1_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/s/sietium-umod-drv/sietium-umod-drv_1.0.0-0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/x/x100-gpu-ddk/x100-gpu-ddk_1.16-3kylin3k24.23_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/x/xdxgpu/xdxgpu_1.10.167-0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/g/glj207-vaapi/mwv207-vaapi_1.6.2-0kylin1_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libd/libdrm/libdrm-amdgpu1_2.4.101-2kylin9k0.2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libd/libdrm/libdrm-etnaviv1_2.4.101-2kylin9k0.2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libd/libdrm/libdrm-freedreno1_2.4.101-2kylin9k0.2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libd/libdrm/libdrm-nouveau2_2.4.101-2kylin9k0.2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libd/libdrm/libdrm-radeon1_2.4.101-2kylin9k0.2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libd/libdrm/libdrm-tegra0_2.4.101-2kylin9k0.2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libd/libdrm/libdrm-tests_2.4.101-2kylin9k0.2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libd/libdrm/libdrm2_2.4.101-2kylin9k0.2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/f/ftg340/ftg340_1.1.10-kylin44_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa/libd3dadapter9-mesa_20.0.8-0kylin3k24.3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa/libegl-mesa0_20.0.8-0kylin3k24.3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa/libegl1-mesa_20.0.8-0kylin3k24.3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa/libgbm1_20.0.8-0kylin3k24.3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa/libgl1-mesa-dri_20.0.8-0kylin3k24.3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa/libgl1-mesa-glx_20.0.8-0kylin3k24.3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa/libglapi-mesa_20.0.8-0kylin3k24.3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa/libgles2-mesa_20.0.8-0kylin3k24.3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa/libglx-mesa0_20.0.8-0kylin3k24.3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa/libosmesa6_20.0.8-0kylin3k24.3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa/libwayland-egl1-mesa_20.0.8-0kylin3k24.3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa/mesa-opencl-icd_20.0.8-0kylin3k24.3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa/mesa-va-drivers_20.0.8-0kylin3k24.3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa/mesa-vdpau-drivers_20.0.8-0kylin3k24.3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa/mesa-vulkan-drivers_20.0.8-0kylin3k24.3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/f/ftv310-drv-video/ftv310-drv-video_1.0.21.kylin11_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/musa/musa_2.7.1-0kylin3_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/i/innogpu-fh2m/innogpu-fh2m_3.2.1.16-v10.2-kylin_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/clang-11-examples_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/clang-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/clang-format-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/clang-tidy-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/clang-tools-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/clangd-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/libc++1-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/libc++abi1-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/libclang-cpp11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/libclang1-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/liblld-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/liblldb-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/libllvm11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/libomp5-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/lld-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/lldb-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/llvm-11-runtime_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/llvm-11-tools_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/llvm-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/python3-clang-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/python3-lldb-11_11.0.0-2~0kylin2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/a/amdgpu-dkms/amdgpu-dkms_5.13.20.5.1.50100-1395274-0kylin4_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/c/csmicro-deb/csmicro-deb_1.494.12-0kylin1_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/ljmgp/ljmgp_2.2.4.30-0kylin1_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/x/xorg-server/xdmx-tools_1.20.9-2kylin2.4k24.37_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/x/xorg-server/xdmx_1.20.9-2kylin2.4k24.37_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/x/xorg-server/xnest_1.20.9-2kylin2.4k24.37_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/x/xorg-server/xserver-xephyr_1.20.9-2kylin2.4k24.37_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/x/xorg-server/xserver-xorg-core_1.20.9-2kylin2.4k24.37_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/x/xorg-server/xserver-xorg-legacy_1.20.9-2kylin2.4k24.37_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/x/xorg-server/xvfb_1.20.9-2kylin2.4k24.37_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/r/rxview-bf200/rxview-bf200_0.99.4-0kylin4_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux/linux-buildinfo-5.4.18-164-generic_5.4.18-164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux/linux-headers-5.4.18-164-generic_5.4.18-164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux/linux-image-5.4.18-164-generic_5.4.18-164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux/linux-libc-dev_5.4.18-164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux/linux-modules-5.4.18-164-generic_5.4.18-164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux/linux-modules-extra-5.4.18-164-generic_5.4.18-164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux/linux-tools-5.4.18-164-generic_5.4.18-164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux/linux-tools-5.4.18-164_5.4.18-164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/x/xserver-xorg-video-amdgpu/xserver-xorg-video-amdgpu_19.1.0-1kylin3k23.2_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/x/xserver-xorg-video-ati/xserver-xorg-video-ati_19.1.0-1kylin4k0.1_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/x/xserver-xorg-video-ati/xserver-xorg-video-radeon_19.1.0-1kylin4k0.1_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/d/d3000m-ddx/d3000m-ddx_1.0.19kylin25_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-crashdump_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-generic-hwe-18.04-edge_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-generic-hwe-18.04_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-generic_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-headers-generic-hwe-18.04-edge_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-headers-generic-hwe-18.04_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-headers-generic_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-headers-virtual-hwe-18.04-edge_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-headers-virtual-hwe-18.04_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-headers-virtual_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-image-extra-virtual-hwe-18.04-edge_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-image-extra-virtual-hwe-18.04_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-image-extra-virtual_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-image-generic-hwe-18.04-edge_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-image-generic-hwe-18.04_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-image-generic_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-image-virtual-hwe-18.04-edge_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-image-virtual-hwe-18.04_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-image-virtual_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-tools-generic-hwe-18.04-edge_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-tools-generic-hwe-18.04_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-tools-generic_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-tools-virtual-hwe-18.04-edge_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-tools-virtual-hwe-18.04_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-tools-virtual_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-virtual-hwe-18.04-edge_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-virtual-hwe-18.04_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-virtual_5.4.18.164.153_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/i/icubegpu/icubegpu_3.2.1-0kylin1_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/g/gf-arise-linux-graphics-driver-dri/gf-arise-linux-graphics-driver-dri_25.00.41-0kylin1_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/m/mesa-mwv207d-guest/mwv207d-mesa-dkms_1.0.12-Kylin.v10_arm64.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-firmware/linux-firmware_1.187.15kylin0k22.52_all.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/r/realtek-wifi-dkms/realtek-wifi-dkms_5.15.01-1kylin0k0.16_all.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/r/realtek-usb-wifi-dkms/realtek-usb-wifi-dkms_5.4.01-1kylin0k0.3_all.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/libd/libdrm/libdrm-common_2.4.101-2kylin9k0.2_all.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/llvm-toolchain-11/llvm-11-examples_11.0.0-2~0kylin2_all.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/x/xorg-server/xserver-common_1.20.9-2kylin2.4k24.37_all.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux/linux-cloud-tools-common_5.4.18-164.153_all.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux/linux-headers-5.4.18-164_5.4.18-164.153_all.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux/linux-tools-common_5.4.18-164.153_all.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux/linux-tools-host_5.4.18-164.153_all.debhttps://archive.kylinos.cn/kylin/KYLIN-ALL/pool/main/l/linux-meta/linux-source_5.4.18.164.153_all.deb