Post #2173032
2026-05-02 13:45 UTC
Rocky - https://kb.ciq.com/article/rocky-linux/rl-cve-2026-31431-mitigation
(couldn't find an official link)
Slackware - nothing on http://www.slackware.com/security/list.php?l=slackware-security&y=2026
Ubuntu - https://ubuntu.com/security/CVE-2026-31431
all around very unclear
#copyfail - ¯\_(ツ)_/¯
Replies (4)
-
@ParadeGrotesque@mastodon.sdf.org 2026-05-02 14:45
@jschauma I suspect there is nothing on Slackware, because v15 is still on kernel 5.15.193, while current is on 6.18.25, which could be upgraded real soon now...
-
@chebra@mstdn.io 2026-05-03 02:43
@jschauma ubuntu released a kmod update which disables the algif_aead module, all my servers got it via unattended updates. Kernel not patched yet
-
@alanc@hachyderm.io 2026-05-03 06:47
@jschauma Oracle: https://linux.oracle.com/cve/CVE-2026-31431.html
-
@oscherler@tooting.ch 2026-05-04 14:40
@jschauma Yes, this Ubuntu page is very shitty. WTF does “not in release” mean, and why did they bury the main version almost at the end of the page?