Larvitz 
@Larvitz@burningboard.net
IT Consultant from Germany, Linux enthusiast, BSD fanboy and firmly convinced that Ancient Domains of Mystery is the greatest video game of all time (and always will be). You'll find me here talking about Open Source, self-hosting, advanced networking (proud operator of AS201379), smart home shenanigans, and anything you can torment with a terminal. Cat pictures also welcome. Left, antifascist, vegan. The trifecta your uncle warned you about.
burningboard.net
Larvitz
@Larvitz@burningboard.net
IT Consultant from Germany, Linux enthusiast, BSD fanboy and firmly convinced that Ancient Domains of Mystery is the greatest video game of all time (and always will be). You'll find me here talking about Open Source, self-hosting, advanced networking (proud operator of AS201379), smart home shenanigans, and anything you can torment with a terminal. Cat pictures also welcome. Left, antifascist, vegan. The trifecta your uncle warned you about.
burningboard.net
@Larvitz@burningboard.net
·
1h ago
Fresh gist: mitigating CVE-2026-31431 ("Copy Fail") on RHEL 8/9/10 with a tiny Ansible playbook.
It blacklists algif_aead via a kernel boot arg (initcall_blacklist=algif_aead_init), reboots only when needed, and asserts the mitigation actually stuck after reboot. Idempotent & safe to re-run.
https://codeberg.org/Larvitz/gists/src/branch/main/2026/20260501-CVE-2026-31431_RHEL_Mitigation.md
#Ansible #RHEL #Linux #InfoSec #SysAdmin #DevOps #CVE #CVE_2026_31431 #copyfail
0
0
0
#debian has released a new Debian 13 (Trixie) kernel to fix #cve_2026_31431.
If you aren't on Trixie yet, maybe a good time to upgrade?
#sysadmin #homelab #linux
0
0
0
Harry Sintonen
@harrysintonen@infosec.exchange
Infosec consultant at REVƎЯSEC https://reversec.com - Coding, Research + various other interests
infosec.exchange
Harry Sintonen
@harrysintonen@infosec.exchange
Infosec consultant at REVƎЯSEC https://reversec.com - Coding, Research + various other interests
infosec.exchange
@harrysintonen@infosec.exchange
·
1d ago
Mitigation to #CVE_2026_31431 / #copyfail :
- If kernel config has CONFIG_CRYPTO_USER_API_AEAD=m:
echo “install algif_aead /bin/false” | sudo tee /etc/modprobe.d/disable-algif.conf; sudo rmmod algif_aead
- If kernel config has CONFIG_CRYPTO_USER_API_AEAD=y:
Add “initcall_blacklist=algif_aead_init” to the kernel command line and reboot.
14
0
21
Nacho
@nacho@frankenwolke.com
Diletante de la subcultura, paladín de la verdad ociosa, ciclista impenitente y descreído militante.
frankenwolke.com
Si sois sysadmins de Linux mejor no hagáis planes para el puente... https://copy.fail/
#copyfail #cve_2026_31431
11
0
17
You've seen all posts