Recently, two critical local privilege escalation vulnerabilities have been disclosed in the Linux Kernel: "Copy Fail" (CVE-2026-31431) and its variant "Dirty Frag" (CVE-2026-43284, CVE-2026-43500). These vulnerabilities allow attackers with basic local user privileges to tamper with read-only files and potentially gain root access to the system.
As you may be aware, deepin 23 has officially reached its End of Life (EOL) and is no longer receiving regular system or security updates. However, given the high severity and potential impact of these vulnerabilities, and out of a strong sense of responsibility to our users, our R&D team has made an exception. We have manually pushed kernel patch packages addressing these specific vulnerabilities to the deepin 23 repositories.
To ensure your system remains secure, we strongly urge all users still on deepin 23 to manually upgrade their kernels immediately via the terminal.
🛠️ Manual Upgrade Instructions
Confirm the currently used kernel version: execute the terminal command uname -a.
Then execute the appropriate command based on your current kernel version:
⚠️ Important Note: After the installation is complete, you must reboot your computer for the new, secure kernel to take effect.
💡 Long-term Recommendation for deepin 23 Users
While we have provided this emergency patch, deepin 23 remains unmaintained, leaving it vulnerable to future, unpatched security threats. For continuous, stable, and automated security support, we highly recommend planning a new installation to our latest operating system, deepin 25, as soon as possible.
中文 
The native Deepin applications aren't updated 
Dear deepin 23 users and community members,
Recently, two critical local privilege escalation vulnerabilities have been disclosed in the Linux Kernel: "Copy Fail" (CVE-2026-31431) and its variant "Dirty Frag" (CVE-2026-43284, CVE-2026-43500). These vulnerabilities allow attackers with basic local user privileges to tamper with read-only files and potentially gain root access to the system.
As you may be aware, deepin 23 has officially reached its End of Life (EOL) and is no longer receiving regular system or security updates. However, given the high severity and potential impact of these vulnerabilities, and out of a strong sense of responsibility to our users, our R&D team has made an exception. We have manually pushed kernel patch packages addressing these specific vulnerabilities to the deepin 23 repositories.
To ensure your system remains secure, we strongly urge all users still on deepin 23 to manually upgrade their kernels immediately via the terminal.
🛠️ Manual Upgrade Instructions
Confirm the currently used kernel version: execute the terminal command
uname -a.Then execute the appropriate command based on your current kernel version:
For Kernel 6.12 users:
For Kernel 6.6 users:
⚠️ Important Note: After the installation is complete, you must reboot your computer for the new, secure kernel to take effect.
💡 Long-term Recommendation for deepin 23 Users
While we have provided this emergency patch, deepin 23 remains unmaintained, leaving it vulnerable to future, unpatched security threats. For continuous, stable, and automated security support, we highly recommend planning a new installation to our latest operating system, deepin 25, as soon as possible.
Download deepin 25 images : https://www.deepin.org/en/download/
Thank you for your continued support and loyalty to deepin!
The deepin Community Team
May 18, 2026