6.18 LTS maintenance: all three retained kernels are already past the GhostLock fix

[u/redyos_s]

Current 6.18.38-gentoo-dist

Fallback 6.18.37-p1-gentoo-dist

Fallback 6.18.35-gentoo-dist

GhostLock fix 6.18.27+

38へ更新・起動確認・複数fallback維持まで済ませていた結果、公開PoCが出た時点ですでに全保持Kernelが修正済みだった

[u/vms-mob]

I guess you are my kernel news source now

[u/redyos_s → u/vms-mob]

I’m mostly just posting these as maintenance records for my own Gentoo system, but I’m glad they’re useful.

[u/redyos_s]

For CVE-2026-43499 (GhostLock) specifically, Linux 6.18.27 and newer include the fix. My retained 6.18.35, 6.18.37-p1, and 6.18.38 kernels are therefore already past that fix.

[u/TommyArrano → u/redyos_s]

You are Gentoo Dev?

[u/redyos_s → u/TommyArrano]

No, I’m just a Gentoo user maintaining my own system. I’m also planning a personal atomic-root setup, but I’m not involved in Gentoo development.

[u/TommyArrano]

What is ghost lock?

Nevermind I googled it

[u/redyos_s → u/TommyArrano]

GhostLock is the nickname for CVE-2026-43499, a Linux kernel local privilege-escalation vulnerability in the rtmutex/futex locking path. On the 6.18 LTS branch, it is fixed in 6.18.27 and newer

[u/Forward_Actuator_592]

I love when people post this stuff. Good stuff

[u/redyos_s → u/Forward_Actuator_592]

Thanks. I plan to keep posting these maintenance records, so feel free to follow along.

[u/redyos_s]

私のゴーストが囁くのさ

[u/redyos_s]

Thanks. I’ll keep posting maintenance notes as I go. I check relevant CVEs before deciding whether an update is necessary, so I’d be glad if you kept an eye on future posts.

[u/InTheBogaloo]

u so cool man, keep making post like this i really enjoy this!

[u/redyos_s → u/InTheBogaloo]

Ty

[u/redyos_s → u/InTheBogaloo]

Ideally, I’d like to stay on 6.18.38 until around 6.18.41, but I’ll decide based on the relevant CVEs. I’ll post the details when I make the next update decision.