Disabling algif_aead_init
Mitigation for CVE-2026-31431

Introduction

With CVE-2026-31431 a local privilege escalation vulnerability was discovered in the Linux Kernel. This affects all Mindbreeze InSpire appliances that have version 26.2 or older installed.

With the Mindbreeze InSpire 26.3 Release the vulnerability will be fixed by providing a non-vulnerable kernel.

For older Mindbreeze InSpire installations, the vulnerable call can be disabled with the steps presented in the following chapters.

Deployment of the Mitigation

The following steps should be performed on all member nodes of a Mindbreeze InSpire cluster:

1. Login with SSH to the Mindbreeze InSpire server using root credentials.
2. Run: rpm-ostree kargs --append=initcall_blacklist=algif_aead_init
3. Reboot the appliance

Verification

If correctly deployed, the following command should output:

initcall_blacklist=algif_aead_init

grep -o initcall_blacklist=algif_aead_init /proc/cmdline