@fanf42@social.treehouse.systems
Post #1799770
2026-04-30 03:42 UTC
So, everybody checks if their kernel is up to date and patched against #copyfail
Mandatory hype site : https://copy.fail
Details : https://xint.io/blog/copy-fail-linux-distributions
Mitigation is removing kernel module. From the linked article
For immediate mitigation, block AF_ALG socket creation via seccomp or blacklist the algif_aead module:
echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif-aead.conf
rmmod algif_aead
Be careful, Fedora and RedHat derivatives have the module built-in and so it can't be removed
Replies (3)
-
@Lioh@social.anoxinon.de 2026-04-30 06:39
@fanf42 so on RHEL no Errata and no mitigation, yet. Not nice.
-
@chrispy@chaos.social 2026-04-30 06:48
@fanf42 → lets an unprivileged local user write into the page cache and obtain root CVE-2026-31431, no score yet at NIST
-
@ligasser@social.epfl.ch 2026-04-30 08:32
@fanf42 two things from my servers: - on one, the rmmod didn't work, only the modprobe.d entry and REBOOT worked - for RHEL, you need to change the boot line: https://seclists.org/oss-sec/2026/q2/287