Anything being done about NVD - CVE-2026-31431 ?

“Ahead of updates in RHEL”. Well, that is not this update, clearly, since RHEL10 has a patch and Rocky 10 doesn’t. But I also have a hard time imagining what you’d need to reach that level of urgency, given that this instant easy escalation to root does NOT reach that level. I’m not going to say …

Red Hat just published them yesterday or the day before, as I only got those updates myself yesterday for RHEL. So 24-48 hours and it will be available in Rocky, as the work on that started yesterday either today or tomorrow it should be available. The poll was created to see if Rocky want to push…

We got the update today, it looks like the debacle is over. How do we undo the mitigation now? :sweat_smile: grubby --update-kernel=ALL --args="initcall_blacklist=" that doesn’t remove the argument, just empties it.

this should remove the workaround GRUB options: grubby --update-kernel=ALL --remove-args="initcall_blacklist=algif_aead_init"

I swear I looked before asking, but I didn’t see --remove-args. Thanks! :heart:

I’ve run dnf update --refresh on Rocky Linux 10.1, but the exploit still works even after reboot. Have you tried re-running the exploit? Is there a specific repository I need to enable to get the patch?

If you’re using a 3rdparty mirror, there’s a possibility that mirror is lagging behind a bit (this just happened for me with a swedish mirror). Browsing through the repo here it looks like 10.1 got a new kernel package last night, however I can’t see the changelog now to verify the patch(es) is in p…

5.14.0-611.49.1.el9_7.x86_64 Will this kernel version be affected?

Yes, because it’s fixed in 5.14.0-611.54.1.el9_7.x86_64

CVE-2026-31431 - Copy Fail - Linux kernel crypto vulnerability

Rocky Linux Help & Support

ivanbg May 6, 2026, 9:35am 69

Update done with dnf update --refresh

Thanks to the team at Rocky Linux for the quick response!

Topic		Replies	Views
Fragnesia - CVE-2026-46300 Rocky Linux Help & Support	32	4141	June 5, 2026
CopyFail (CVE-2026-31431): Patches Now Available for Rocky Linux Announcements rocky-linux-8 , rocky-linux-9 , rocky-linux-10	2	6233	May 8, 2026
Dirty Frag vulnerability reported for Linux kernel CVE-2026-43284, CVE-2026-43500 Rocky Linux Help & Support rocky-linux-8 , rocky-linux-9 , rocky-linux-10	10	5602	May 14, 2026
Rocky 8.10 - CVE-2025-38352 Rocky Linux Help & Support rocky-linux-8	23	1887	September 22, 2025
Is CVE-2026-46243 fixed in RockyLInux 9.7? Rocky Linux Help & Support	16	467	June 25, 2026

CVE-2026-31431 - Copy Fail - Linux kernel crypto vulnerability

Related topics