TGViewer
DevOps&SRE Library DevOps&SRE Library @devopslibrary · 19.9K subscribers
Post #7644 3.12K
We Tested Copy Fail in Kubernetes: PSS Restricted and RuntimeDefault Did Not Block AF_ALG

On April 22, 2026, the Linux CNA published CVE-2026-31431, a Linux kernel vulnerability in algif_aead, the AEAD side of the kernel's AF_ALG crypto socket interface. Xint named the bug Copy Fail and showed how page-cache bytes for a read-only file can be changed without dirtying the file on disk.


https://juliet.sh/blog/we-tested-copy-fail-in-kubernetes-pss-restricted-runtime-default-af-alg
Open in Telegram All posts from @devopslibrary
More from @devopslibrary
  1. Sep 23, 2026Building a Real k6 Test Suite Against a Live Kubernetes App In part 1 I covered k6's philo…
  2. Sep 22, 2026My Experiments with MCP: Moving Beyond the "Agent Wrapper" I'm currently working with a cl…
  3. Sep 22, 2026Your AI just deleted the wrong deployment. Now what? Picture this. A developer asks an AI…
  4. Sep 21, 2026Kafka on Kubernetes: Performance Lessons for Any Disk-Heavy Data Service We recently start…
  5. Sep 21, 2026What the Popularity of Emerging Tools Tells Us About Kubernetes' Future Kubernetes has mat…
  6. Sep 20, 2026How Uber Conquered Database Overload: The Journey from Static Rate-Limiting to Intelligent…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →