alg_check

⚠️ 重要免责声明：结构性加固风险 本工具通过结构性阻断 来缓解 CVE-2026-31431 ，具体方式为物理重命名内核模块并将其从内存中清除。使用前，请了解以下架构性风险： 内核更新易变性 ：加固效果是临时的 。内核更新会在新的 /lib/modules/ 目录下部署全新的、存在漏洞的模块，使之前的阻断措施失效。 功能性副作用 ：禁用 AFALG（内核加密 API）可能会破坏依赖内核级硬件加速的特定应用程序或服务（例如专用 VPN、磁盘加密工具或自定义安全工具）。cite: 3 缓解 vs. 修补 ：这是一种临时解决方案 ，而非永久补丁。其目的是在发行版提供修补后的内核之前填补这一空白...

CVE-2026-31431

📌 CVE-2026-31431 – 通过 AEAD 加密套接字误用实现权限提升 🧠 概述 CVE-2026-31431 是一个 Linux 权限提升漏洞，它滥用了 AFALG（内核加密 API） 接口。通过构造与 AEAD（带关联数据的认证加密）套接字的恶意交互，攻击者可以提升权限并以 root 身份执行代码。 该漏洞利用了加密套接字操作处理不当的问题，允许受控的内存操作并最终实现权限提升。 ⚠️ 影响 本地权限提升 Root shell 访问（/usr/bin/su） 影响具有易受攻击的内核加密实现的系统 🔍 技术分析 该漏洞利用程序： 创建一个 AFALG 套接字 绑定到：...

Paranoid-Copy-Fail-CVE-2026-31431

================================ Paranoid AFALG 加固脚本 ================================ 阻止所有用户空间内核加密接口（AFALG + algif 模块） 缓解 CVE-2026-31431 并减少未来攻击面 对正常系统安全（SSH、TLS、LUKS、WireGuard） 仅会破坏少数直接使用 AFALG 套接字的罕见应用 ================================...

mks-copy-fail-mitigation

Copy Fail 缓解 DaemonSet 用于在 MKS 集群的所有 worker 节点上修复 Copy Fail 系列漏洞的 DaemonSet。 目录 CVE-2026-31431 Copy Fail CVE-2026-43284、CVE-2026-43500、CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail 漏洞描述 CVE ID： CVE-2026-31431 CVE 链接： https://nvd.nist.gov/vuln/detail/CVE-2026-31431 攻击向量及 CVSS v.3.1 危险等级： 得分：7.8 HI...

libkcapi security update

An update is available for libkcapi. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libkcapi allows user-space to access the Linux kernel crypto API. This libra...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: algifaead – Fixed the issue with the check for the minimum RX size during decryption. The check for the minimum receive buffer size did not take the tag size into account during decryption. This issue has been fixed by...

CVE-2026-80831

In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxsdcpaesblockcrypt uses sgdmalen without mapping the source scatterlist with dmamapsg first. Therefore, sgdmalen is invalid and could return zero or a stale DMA length,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104542)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104542 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: algifskcipher - force synchronous processing on trees without ctx-state The AIO/async pat...

OESA-2026-3440 libkcapi security update

The Linux kernel exports a Netlink interface of type AFALG to allow user space to utilize the kernel crypto API. libkcapi uses this Netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level Netlink interface handling. The library does not implement...

CVE-2026-71225 affecting package libkcapi for versions less than 1.5.1-1

CVE-2026-71225 affecting package libkcapi for versions less than 1.5.1-1. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2026-74403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ccp - Check for page allocation failure correctly in TIO Sashiko notes: if snpallocfirmwarepages returns NULL under memory pressure, is it safe to pass ...

The vulnerability of the parse_longname() function in the fs/ceph/crypto.c module of the distributed file system Ceph’s kernel support for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the parselongname function in the fs/ceph/crypto.c module, which is part of the Ceph distributed file system support for Linux operating systems, relates to the pointer dereferencing. Exploiting this vulnerability could allow a malicious actor to cause service failures remote...

CVE-2026-74566

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...

CVE-2026-74280 crypto: marvell/octeontx - fix DMA cleanup using wrong loop index

In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/octeontx - fix DMA cleanup using wrong loop index The sgcleanup path used listi instead of listj when unmapping DMA buffers, leaking successfully mapped entries and repeatedly unmapping the failed one...

PT-2026-72339

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tpm buf append salt function within drivers/char/tpm/tpm2-sessions.c. The function calls crypto kpp generate public key and crypto kpp compute shared secret withou...

Linux Distros Unpatched Vulnerability : CVE-2026-68147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fscrypt: Avoid dynamic allocation in fscryptgetdevices When a blkcryptokey starts being used or is evicted, fs/crypto/ calls fscryptgetdevices to get the...

CVE-2026-71226

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers. Mitigation To mitigate this issue, applications should avoid initializing libkcapi handle...

SUSE CVE-2026-64439

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...

CVE-2026-64439 crypto: krb5 - filter out async aead implementations at alloc

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...

PT-2026-64660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Linux kernel's crypto krb5 implementation. The functions krb5 aead encrypt, krb5 aead decrypt, rfc8009 encrypt, and rfc8009 decrypt set a NULL...