Ubuntu 22.04 LTS系统下CVE-2022-3534（libbpf）漏洞修复步骤求助

架构老林

2026-4-17

Hey there, let's tackle this CVE-2022-3534 (libbpf) vulnerability on your Ubuntu 22.04 LTS system step by step. You already ran the basic sudo apt-get update, sudo apt-get upgrade, and sudo reboot, but let's make sure we specifically target the affected package to confirm it's patched properly.

Here's the detailed step-by-step process:

Step 1: Check current libbpf package versions
First, let's see what versions of libbpf-related packages you have installed. Run this command:
```
dpkg -l | grep libbpf
```
For Ubuntu 22.04 LTS, the patched version you need is libbpf0:amd64 1.0.1-1ubuntu0.22.04.2 (or the equivalent for your system's architecture, like i386). Compare this with the version shown in your output to check if you already have the fix.
Step 2: Upgrade the affected libbpf packages
If your version isn't the patched one, run these commands to specifically upgrade the libbpf packages (this ensures we only update these packages without installing new ones):
```
sudo apt update
sudo apt install --only-upgrade libbpf0 libbpf-dev
```
This will pull the latest security patches from Ubuntu's official repositories.
Step 3: Verify the patched version
Run the check command again to confirm the packages are now updated:
```
dpkg -l | grep libbpf
```
Make sure the version numbers match the patched ones mentioned earlier.
Step 4: Re-scan for the vulnerability
If you've completed the upgrade but your scanner still reports the vulnerability, try rebooting your system once more (sometimes kernel-related modules need a restart to load the patched version):
```
sudo reboot
```
After rebooting, run your vulnerability scanner again to confirm the issue is resolved.

Extra note: Check your system's security sources

If the upgrade doesn't find the patched package, you might be missing Ubuntu's security update repository. Verify that your /etc/apt/sources.list file includes this line: