alg_check

⚠️ Important Disclaimer: Structural Hardening Risks This tool implements Structural Blocking to mitigate CVE-2026-31431 by physically renaming kernel modules and purging them from memory. Before use, please be aware of the following architectural risks: Kernel Update Volatility : Hardening effects...

CVE-2026-31431

📌 CVE-2026-31431 – Privilege Escalation via AEAD Crypto Socket Misuse 🧠 Overview CVE-2026-31431 is a Linux privilege escalation vulnerability that abuses the AFALG kernel crypto API interface. By crafting a malicious interaction with AEAD Authenticated Encryption with Associated Data sockets, an...

Paranoid-Copy-Fail-CVE-2026-31431

root@kitploit: ================================ Paranoid AFALG hardening script ================================ Blocks all user-space kernel crypto interfaces AFALG + algif modules Mitigates CVE-2026-31431 and reduces future attack surface Safe for normal systems SSH, TLS, LUKS, WireGuard Only...

mks-copy-fail-mitigation

Copy Fail Mitigation DaemonSets DaemonSets for fixing vulnerabilities of the Copy Fail family on all worker nodes of MKS clusters. Contents CVE-2026-31431 Copy Fail CVE-2026-43284, CVE-2026-43500, CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail Vulnerability Description CVE ID: CVE-2026-31431 CVE...

CVE-2026-80831

In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxsdcpaesblockcrypt uses sgdmalen without mapping the source scatterlist with dmamapsg first. Therefore, sgdmalen is invalid and could return zero or a stale DMA length,...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm – injects an error before stopping the queue. The master OOO cannot be completely closed when the accelerator core reports a memory error. Therefore, the driver needs to inject the qm error to close the maste...

CVE-2026-71225 affecting package libkcapi for versions less than 1.5.1-1

CVE-2026-71225 affecting package libkcapi for versions less than 1.5.1-1. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2026-74403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ccp - Check for page allocation failure correctly in TIO Sashiko notes: if snpallocfirmwarepages returns NULL under memory pressure, is it safe to pass ...

The vulnerability of the parse_longname() function in the fs/ceph/crypto.c module of the distributed file system Ceph’s kernel support for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the parselongname function in the fs/ceph/crypto.c module, which is part of the Ceph distributed file system support for Linux operating systems, relates to the pointer dereferencing. Exploiting this vulnerability could allow a malicious actor to cause service failures remote...

CVE-2026-74566

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...

CVE-2026-74280 crypto: marvell/octeontx - fix DMA cleanup using wrong loop index

In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/octeontx - fix DMA cleanup using wrong loop index The sgcleanup path used listi instead of listj when unmapping DMA buffers, leaking successfully mapped entries and repeatedly unmapping the failed one...

PT-2026-72339

In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completion in tpm buf append salt tpm buf append salt in drivers/char/tpm/tpm2-sessions.c calls crypto kpp generate public key and crypto kpp compute shared secret without installing a...

Linux Distros Unpatched Vulnerability : CVE-2026-68147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fscrypt: Avoid dynamic allocation in fscryptgetdevices When a blkcryptokey starts being used or is evicted, fs/crypto/ calls fscryptgetdevices to get the...

CVE-2026-71226

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers. Mitigation To mitigate this issue, applications should avoid initializing libkcapi handle...

SUSE CVE-2026-64439

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...

CVE-2026-64439 crypto: krb5 - filter out async aead implementations at alloc

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...

PT-2026-64660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel's crypto krb5 implementation. The functions krb5 aead encrypt, krb5 aead decrypt, rfc8009 encrypt, and rfc8009 decrypt set a NULL...

Security Bulletin: IBM Storage Scale System: Vulnerability in Linux kernel crypto subsystem could allow local privilege escalation (CVE-2026-31431)

Summary IBM Storage Scale Systems is affected by a security vulnerability identified in the Linux kernel's cryptographic interface CVE-2026-31431 that could allow a local user with low privileges to escalate to root privileges. The vulnerability has a CVSS score of 7.8 High and requires local...

EUVD-2026-38884

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AFALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccpaescomplete restores AESBLOCKSIZE bytes into the caller's IV buffer while RFC3686 skciphers expose an 8-byte IV, s...

PT-2026-51866

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the af alg cryptography module of the Linux kernel. An arithmetic overflow occurs when processing associated data lengths during the transmit buffer size check. A remote...