Discussion

@mttaggart I'm confused by the mitigation step. "disable the algif_aead module" but does this actually prevent the vulnerability? What about systems that don't have that module loaded or compiled in?

@mttaggart The exploit does not work on my Slackware 15.0 systems with a 5.15.93 kernel.

@mttaggart typical bros wanting to get noticed - it's irresponsible to disclose like this.

@mttaggart I love the beauty and simplicity of this exploit

@mttaggart

A missing continue.

I am sure Lint or an AI woud have found this logic bug. /s

#Coding

@mttaggart It also works on WSL.

@mttaggart

Editing to add:

RHEL has now updated the severity and the fix is no longer "deferred" for all affected OSes.

Looks like it requires a local user account, with a password set, to exploit, yes?

https://access.redhat.com/security/cve/cve-2026-31431

@mttaggart Debian 13 still vulnerable with 6.12.74

@mttaggart Can't privesc me if I always run as root!