Anything being done about NVD - CVE-2026-31431 ?

I agree fully that this is what i signed up for. and feel the same as you do There was a mitigation for it so that likely weighed heavily for Red Hat as for how much testing would be done/delay before releasing as well as Rocky deciding to wait for RHEL packages. If we could have an option to ena…

[image] StatiC: Do rocky developers always jump on trying to patch very high severity stuff and abort it if RH gets it out before they do? Do Rocky devs wait hours day/days before putting effort in? Rocky aims to be 1:1 with RHEL, which has always been the case since the beginning. This is w…

Right, I probably didn’t make that entire post clear. My context with that question in that post was if they were to start patching the most critical issues if RH doesn’t get them out in a decent time frame, What would that look like? It wasn’t insinuating that they should do that or that they do…

I think that is a result of using Python < 3.10. If you (sudo) dnf install python3.11 (or python3.12), and make sure the line invoking Python reads python3.11 or python3.12 instead of just python3, it will “work” again if vulnerable. I would personally just do (sudo) grubby --update-kernel=ALL --a…

Thank you very much. I have upgraded to the specified kernel version(5.14.0-611.54.1.el9_7.x86_64). Would it be sufficient to upgrade to that kernel version? Is there any way to verify that the threat has been fixed?

I have used (not very precise, but…) rpm -q --changelog kernel | grep 31431

# uname -a Linux 12-19-rl96 5.14.0-611.54.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue May 5 16:52:47 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux # rpm -q --changelog kernel | grep CVE-2026-31431 - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-1…

@carlo I’ve just tried that on Rocky 9 with python 3.13 and it asks me for a password. Same kernel version as you. Maybe your user testa is added to sudoers and is allowed access without having to provide a password? Just guessing. But either way, the new kernel doesn’t allow it which suggests s…

The user testa is a regular user with a password set, but not configured in the sudoers file. # cat /etc/sudoers | grep testa # ls /etc/sudoers.d/ #

@carlo As mentioned, I guessed at sudoers, but also if you already used sudo as testa user, the password is remembered. Subsequent sudo doesn’t ask again for the password. Either way, the problem doesn’t exist in this kernel as I’ve already tested and cannot replicate it. Therefore, the problem i…

CVE-2026-31431 - Copy Fail - Linux kernel crypto vulnerability

Rocky Linux Help & Support

rflores May 10, 2026, 7:47pm 111

Here it goes:

Topic		Replies	Views
Fragnesia - CVE-2026-46300 Rocky Linux Help & Support	32	4827	June 5, 2026
Any news on when a fixed release for Januscape (CVE-2026-53359), the KVM/x86 guest-to-host escape vulnerability, will be available? Rocky Linux Help & Support	34	1628	July 16, 2026
CopyFail (CVE-2026-31431): Patches Now Available for Rocky Linux Announcements rocky-linux-8 , rocky-linux-9 , rocky-linux-10	2	6877	May 8, 2026
Dirty Frag vulnerability reported for Linux kernel CVE-2026-43284, CVE-2026-43500 Rocky Linux Help & Support rocky-linux-8 , rocky-linux-9 , rocky-linux-10	10	6131	May 14, 2026
Is CVE-2026-46243 fixed in RockyLInux 9.7? Rocky Linux Help & Support	17	982	June 29, 2026

CVE-2026-31431 - Copy Fail - Linux kernel crypto vulnerability

Related topics