The Lab · 2026-05-05 05:31:42 · GitHub Issues
A GitHub pull request within the tetragon/example repository introduces a security policy designed to mitigate exploitation of CVE-2026-31431, a disclosed vulnerability. The proposed mitigation operates at the syscall level, intercepting attempts to create AF_ALG sockets—kernel-level cryptographic interfaces—by overrid...
The Lab · 2026-05-06 12:31:40 · GitHub Issues
The openEuler kernel project has merged a critical security fix addressing a buffer overflow vulnerability in the Linux kernel's AF_ALG cryptographic interface. The patch, committed on April 29, 2026, resolves CVE-2026-31677 and targets a flaw in how the receive scatter-gather (RX SG) list extraction was handled withou...
The Lab · 2026-05-12 12:48:31 · Schneier on Security
Security researchers have disclosed a critical Linux kernel vulnerability, designated copy.fail, that allows local attackers to escalate privileges to root-level access by exploiting a flaw in the kernel crypto API. The flaw, disclosed by Theori on April 29, 2026, takes advantage of AF_ALG sockets combined with the spl...