Post #2100399

This is what I'm pasting into my own linux systems to implement the mitigation #cve_2026_31431 suggested at the #copyfail website. It may not be right for you. The 'chattr +i' may make it more difficult to undo! MIT license, or at least its disclaimers, apply. f=disable-algif_aead-CVE-2026-31431.conf if ! [ -d /etc/modprobe.d ]; then printf 'This system does not seem to have a /etc/modprobe.d dir, so this script would need to be adapted.\n' >&2 return 74 else sudo /bin/env -i /bin/sh -c 'set -x;set -e;cd /etc/modprobe.d;umask 133;printf '\''install algif_aead /bin/false\n'\'' >'"$f"';chattr +i '"$f" fi sudo /bin/env -i /bin/sh -c '(set -x;rmmod -v algif_aead)2>&1|grep -v "is not currently loaded"' ls -l /etc/modprobe.d/$f cat -t /etc/modprobe.d/$f