{"id":39,"date":"2026-07-13T17:42:22","date_gmt":"2026-07-13T15:42:22","guid":{"rendered":"https:\/\/disrupt.rs\/blog\/?p=39"},"modified":"2026-07-13T17:45:43","modified_gmt":"2026-07-13T15:45:43","slug":"openvz7-ghostlock-patch-for-kernel-3-10-0-1160-119-1-vz7-224-4","status":"publish","type":"post","link":"https:\/\/disrupt.rs\/blog\/2026\/07\/13\/openvz7-ghostlock-patch-for-kernel-3-10-0-1160-119-1-vz7-224-4\/","title":{"rendered":"OpenVZ7 GhostLock patch for kernel 3.10.0-1160.119.1.vz7.224.4"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As of time of writing this OpenVZ havent yet published a patch for this very serious flaw in kernel. With help of Claude i have backported patch from newer kernel  to 3.10 and it seems to work. Feedback and testing is appreciated.<br><br>You have two options, either download latest kernel source from OpenVZ&#8217;s bitbucket repo or build latest offical kernel 3.10.0-1160.119.1.vz7.224.4 and apply the patch. Ive put all files on my github page where you have .spec and patch but also binary .rpm&#8217;s if you feel brave enough to try. I recommend doing .src.rpm recompile again with my kernel.spec and patch so you would be sure no other files were modified. <\/p>\n\n\n\n<p class=\"has-small-font-size wp-block-paragraph\">How to manually recompile latest kernel from bitbucket <code>(3.10.0-1160.129.1.vz7.226<\/code>.2)<br><br>USAGE:<br><br><code>git clone -b branch-rh7-3.10.0-1160.129.1.vz7.226.x-ovz --single-branch --depth 1 https:\/\/USERNAME@bitbucket.org\/openvz\/vzkernel.git<\/code><br><br><code>cd vzkernel<br>patch -p0 kernel\/rtmutex.c &lt; \/patch\/CVE-2026-43499-vzkernel3.10.patch (or just overwrite rtmutex.c from my attachments)<br>cp config.OpenVZ .config<br>make olddefconfig<br>make -j10 bzImage<br>make -j10 modules<br>make modules_install <br>cp arch\/x86\/boot\/bzImage \/boot\/vmlinuz-3.10.0-1160.129.1.ovz7.226.2<br>dracut \/boot\/initramfs-3.10.0-1160.129.1.ovz7.226.2.img 3.10.0-1160.129.1.ovz7.226.2<br>grub2-mkconfig -o \/boot\/grub2\/grub.cfg<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you prefer to recompile it using src.rpm grab .spec file and patch from my github repo release page<br><br><a href=\"https:\/\/github.com\/dmcdtc\/openvz-cve-patch-2026\/releases\/tag\/openvz-ghostlock-binary\">https:\/\/github.com\/dmcdtc\/openvz-cve-patch-2026\/releases\/tag\/openvz-ghostlock-binary<\/a><br><br>Main page is at:<br><br><a href=\"https:\/\/github.com\/dmcdtc\/openvz-cve-patch-2026\">https:\/\/github.com\/dmcdtc\/openvz-cve-patch-2026<\/a><br><br><br>Link to official latest openVZ src.rpm for vzkernel (to which you apply patch and use my .spec)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/download.openvz.org\/virtuozzo\/releases\/openvz-7.0.22-123\/source\/SRPMS\/v\/vzkernel-3.10.0-1160.119.1.vz7.224.4.src.rpm\">https:\/\/download.openvz.org\/virtuozzo\/releases\/openvz-7.0.22-123\/source\/SRPMS\/v\/vzkernel-3.10.0-1160.119.1.vz7.224.4.src.rpm<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Contact me for any feedback or help<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As of time of writing this OpenVZ havent yet published a patch for this very serious flaw in kernel. With help of Claude i have backported patch from newer kernel to 3.10 and it seems to work. Feedback and testing is appreciated. You have two options, either download latest kernel source from OpenVZ&#8217;s bitbucket repo [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-39","post","type-post","status-publish","format-standard","hentry","category-uncategorised"],"_links":{"self":[{"href":"https:\/\/disrupt.rs\/blog\/wp-json\/wp\/v2\/posts\/39","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/disrupt.rs\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/disrupt.rs\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/disrupt.rs\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/disrupt.rs\/blog\/wp-json\/wp\/v2\/comments?post=39"}],"version-history":[{"count":4,"href":"https:\/\/disrupt.rs\/blog\/wp-json\/wp\/v2\/posts\/39\/revisions"}],"predecessor-version":[{"id":43,"href":"https:\/\/disrupt.rs\/blog\/wp-json\/wp\/v2\/posts\/39\/revisions\/43"}],"wp:attachment":[{"href":"https:\/\/disrupt.rs\/blog\/wp-json\/wp\/v2\/media?parent=39"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/disrupt.rs\/blog\/wp-json\/wp\/v2\/categories?post=39"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/disrupt.rs\/blog\/wp-json\/wp\/v2\/tags?post=39"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}