Copy Fail – CVE-2026-31431

Re:Copy Fail – CVE-2026-31431 by john_strinlai on Wednesday April 29, 2026 @04:46PM (#47954365)

in this specific case, they offer an alternative mitigation if your chosen distro has not updated yet:

For immediate mitigation, block AF_ALG socket creation via seccomp or blacklist the algif_aead module:

    echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif-aead.conf
    rmmod algif_aead 2>/dev/null

[ Parent | on HN ]

Re:Copy Fail – CVE-2026-31431 by marshray on Wednesday April 29, 2026 @05:11PM (#47954725)

Thanks!

I'd do 'umask 133' in front of the echo out of paranoia.

Out of curiosity, was the asterisk after '2>/dev/null' intentional? I had not seen that idiom before.

[ Parent | on HN ]

Re:Copy Fail – CVE-2026-31431 by john_strinlai on Wednesday April 29, 2026 @05:13PM (#47954759)

the asterisk is my oops, trying to format the comment in italics to differentiate my comment from the text provided by the author. sorry for the confusion

[ Parent | on HN ]

Re:Copy Fail – CVE-2026-31431 by ranger_danger on Wednesday April 29, 2026 @05:24PM (#47954919)

And I would do chattr +i disable-algif.conf

[ Parent | on HN ]