Patched kernels for CVE-2026-46333 are now in production repos.
A single dnf upgrade and reboot gets you patched kernels for ssh-keysign-pwn and Fragnesia 👇 https://t.co/BdTyfPA9z1
Disponible paquete de núcleo de Linux 5.10.255 para #ALDOS, corrigiendo CVE-2026-43284 y CVE-2026-43500 (#DirtyFrag) vía @darkshram https://t.co/lsbLorLs36
Ya se publicaron paquetes de kernel para #AlmaLinux 8, 9 y 10 que corrigen vulnerabilidad de #CopyFail (CVE-2026-31431).
dnf -y --refresh update && reboot
Patches for Copy Fail (CVE-2026-31431) are not yet available from Red Hat, so our core team has built patched kernels.
These kernels are available in the testing repository today. Learn more on our blog ⤵️ https://t.co/DN5GxavFT9
‼️Copy Fail (CVE-2026-31431) is a Linux privilege escalation bug that lets any local user get root using a 732-byte Python script, and itworks on basically every major Linux distro shipped since 2017.
Website: https://t.co/f5G6KnEv35
Write-up: https://t.co/W86Pz2PC6C
GitHub: https://t.co/zAMTC6nTRk
It's a logic flaw in the kernel's crypto code (authencesn via AF_ALG and splice()) that allows a small write into the page cache, which can be used to tamper with a setuid binary like /usr/bin/su.
Think how bad this is going to be for shared environments like Kubernetes, CI runners, and cloud sandboxes, where it enables container escape and tenant-to-host compromise.
Found by Theori's Xint Code scanner, patched in the mainline kernel, and publicly disclosed on April 29, 2026; if you can't patch right away, the recommended workaround is to disable the algif_aead module.