logoalt Hacker News

Skywalker13yesterday at 10:07 PM2 repliesview on HN

I don't know what exactly can load this module but the servers are running for many weeks and I suppose that if something will load this module, it stays loaded until the next reboot.. no ?

I tried to rmmod on all servers and rmmod always returns `ERROR: Module algif_aead is not currently loaded`, that's why I think it's fine. Of course I take a look on https://security-tracker.debian.org/tracker/CVE-2026-31431 for the updates.


Replies

Denvercoder9yesterday at 10:15 PM

> I don't know what exactly can load this module

Well, for one thing, opening an AF_ALG socket, as the exploit does.

bombcartoday at 2:34 AM

rmmod just tells you it's not loaded; you'd have to delete the module to prevent it auto-loading.