Anything being done about NVD - CVE-2026-31431 ?

Thanks for the info. Does anyone know if there’s any news about a patch for Rocky Linux 8.10? Or how to proceed?

It looks like Red Hat is releasing fixes so hopefully it won’t be long now. https://access.redhat.com/errata/RHSA-2026:13565

RedHat hasn’t released a fix yet, and as Rocky is downstream, it won’t have a patch either. Alma is not downstream (and not 1:1 RHEL) so they can patch as they please.

Well, Rocky has previously released a patched package before RHEL as an interim solution. IIRC, that was for ssh, whose vulnerabilities are more serious as they may be exploited remotely.

Redhat has flagged RHEL 8-10 as “Fixed” now, so shouldn’t be that long until it flows down to Rocky cve-details Edit: Bugzilla is updated now with links to the specific fixes 2460538 – (CVE-2026-31431) CVE-2026-31431 kernel: crypto: algif_aead - Rev…

I agree with that. A company that earns money from its Linux distribution should be quicker to fix a vulnerability of this kind. This particular vulnerability has received quite a lot of public attention, and it is also one of the first to have been discovered with the help of AI. Rocky Linux is cl…

This was what I was looking for. So, basically there is a published workaround for Rocky. I would suspect that everyone has followed this guide by now in the near term.

The reason I chose to use Rocky Linux in the first place is the bug-for-bug compatibility. I knew at that time that RedHat can be slower to release patches and that using Rocky would add some additional time. While the survey seems to be leaning towards not waiting for RHEL patches. Please keep …

Note that it is only URGENT security patches that will be pushed. Hopefully visibly tagged so that you can opt out easily, and versioned so that the next upstream update automatically applies.

CVE-2026-31431 - Copy Fail - Linux kernel crypto vulnerability

Rocky Linux Help & Support

iwalker May 5, 2026, 7:50am 57

There is a vote for how we can deal with this better in the future - rather than wait for RHEL.

See this vote post: Rocky Linux needs your input regarding urgent security updates! as your input will help shape this.

Topic		Replies	Views
Fragnesia - CVE-2026-46300 Rocky Linux Help & Support	32	4657	June 5, 2026
Any news on when a fixed release for Januscape (CVE-2026-53359), the KVM/x86 guest-to-host escape vulnerability, will be available? Rocky Linux Help & Support	34	1480	July 16, 2026
CopyFail (CVE-2026-31431): Patches Now Available for Rocky Linux Announcements rocky-linux-8 , rocky-linux-9 , rocky-linux-10	2	6767	May 8, 2026
Dirty Frag vulnerability reported for Linux kernel CVE-2026-43284, CVE-2026-43500 Rocky Linux Help & Support rocky-linux-8 , rocky-linux-9 , rocky-linux-10	10	5970	May 14, 2026
Is CVE-2026-46243 fixed in RockyLInux 9.7? Rocky Linux Help & Support	17	859	June 29, 2026

CVE-2026-31431 - Copy Fail - Linux kernel crypto vulnerability

Related topics