CVE-2026-31431: Linux kernel Copy Fail

I know that the kernel is locked down quite a lot, but should we be concerned about the vulnerability?

No, this is Linux kernel exploit for module algif_aead which is not loaded by ROS.

# uname -a
Linux linux 5.6.3 #2 SMP Tue Apr 21 07:04:51 UTC 2026 aarch64 GNU/Linux
# lsmod
Module                  Size  Used by    Tainted: G  
option                 57344  1 
usb_wwan               20480  1 option
usbserial              36864  4 option,usb_wwan
sch_cake               36864  9 
mbim                   90112  1 
ip_set_hash_netportnet    49152  0 
ip_set_hash_netport    49152  0 
ip_set_hash_netnet     49152  0 
ip_set_hash_net        45056  0 
ip_set_hash_netiface    49152  0 
ip_set_hash_mac        28672  0 
ip_set_hash_ipportnet    49152  0 
ip_set_hash_ipport     40960  0 
ip_set_hash_ipportip    45056  0 
ip_set_hash_ipmark     40960  0 
ip_set_hash_ipmac      40960  0 
ip_set_hash_ip         40960  0 
ip_set_bitmap_port     24576  0 
ip_set_bitmap_ipmac    24576  0 
ip_set_bitmap_ip       24576  0 
ip_set_list_set        24576  0 
ip_set                 45056 16 ip_set_hash_netportnet,ip_set_hash_netport,ip_set_hash_netnet,ip_set_hash_net,ip_set_hash_netiface,ip_set_hash_mac,ip_set_hash_ipportnet,ip_set_hash_ipport,ip_set_hash_ipportip,ip_set_hash_ipmark,ip_set_hash_ipmac,ip_set_hash_ip,ip_set_bitmap_port,ip_set_bitmap_ipmac,ip_set_bitmap_ip,ip_set_list_set
nft_xfrm               16384  0 
nft_tunnel             20480  0 
nft_tproxy             16384  0 
nft_synproxy           16384  0 
nft_socket             16384  0 
nft_reject_inet        16384  0 
nft_reject             16384  1 nft_reject_inet
nft_redir              16384  0 
nft_quota              20480  0 
nft_queue              16384  0 
nft_osf                16384  0 
nft_objref             16384  0 
nft_numgen             20480  0 
nft_nat                16384  0 
nft_masq               16384  0 
nft_log                16384  0 
nft_limit              20480  0 
nft_hash               16384  0 
nft_fwd_netdev         16384  0 
nft_dup_netdev         16384  0 
nft_ct                 24576  0 
nft_counter            16384  0 
nft_connlimit          16384  0 
nft_compat             20480  0 
nft_chain_nat          16384  0 
nf_tables_set          45056  0 
nf_tables             135168 26 nft_xfrm,nft_tunnel,nft_tproxy,nft_synproxy,nft_socket,nft_reject_inet,nft_reject,nft_redir,nft_quota,nft_queue,nft_osf,nft_objref,nft_numgen,nft_nat,nft_masq,nft_log,nft_limit,nft_hash,nft_fwd_netdev,nft_dup_netdev,nft_ct,nft_counter,nft_connlimit,nft_compat,nft_chain_nat,nf_tables_set
nf_dup_netdev          16384  2 nft_fwd_netdev,nft_dup_netdev
nf_conncount           24576  1 nft_connlimit
nf_synproxy_core       28672  1 nft_synproxy
xt_nfacct              16384  0 
nfnetlink_log          24576  0 
nfnetlink_queue        28672  0 
nfnetlink_osf          16384  1 nft_osf
nfnetlink_acct         20480  1 xt_nfacct
nf_socket_ipv6         16384  1 nft_socket
nf_tproxy_ipv6         20480  1 nft_tproxy
nf_socket_ipv4         20480  1 nft_socket
nf_tproxy_ipv4         20480  1 nft_tproxy
xt_NFLOG               16384  0 
xt_NFQUEUE             16384  0 
xt_ipvs                20480  0 
xt_comment             16384  0 
ip_vs_wrr              20480  0 
ip_vs_wlc              16384  0 
ip_vs_sh               20480  0 
ip_vs_sed              16384  0 
ip_vs_rr               20480  0 
ip_vs_ovf              16384  0 
ip_vs_nq               16384  0 
ip_vs_mh               20480  0 
ip_vs_lc               16384  0 
ip_vs_lblcr            24576  0 
ip_vs_lblc             20480  0 
ip_vs_ftp              20480  0 
ip_vs_fo               16384  0 
ip_vs_dh               20480  0 
ip_vs                 159744 32 xt_ipvs,ip_vs_wrr,ip_vs_wlc,ip_vs_sh,ip_vs_sed,ip_vs_rr,ip_vs_ovf,ip_vs_nq,ip_vs_mh,ip_vs_lc,ip_vs_lblcr,ip_vs_lblc,ip_vs_ftp,ip_vs_fo,ip_vs_dh
vxlan2                 61440  0 
sctp                  258048  8 
tun                    45056  0 
ip6table_nat           16384  0 
ip6t_NPT               16384  0 
ip6table_mangle        16384  0 
ip6table_raw           16384  0 
btusb                  45056  0 
sch_sfq                20480  2 
monitor               307200  0 
sch_fq_codel           24576 16 
cls_fw                 20480  2 
sch_htb                32768  2 
8021q                  32768  1 
mrp                    24576  1 8021q
wifi_3_0             1081344  1 monitor
wireguard              77824  0 
ip6_udp_tunnel         16384  2 vxlan2,wireguard
usb_storage            61440  1 
udp_tunnel             20480  2 vxlan2,wireguard
libcurve25519          16384  0 
libcurve25519_generic    36864  1 wireguard
libchacha20poly1305    16384  1 wireguard,[permanent]
qca_ol               1953792  2 monitor,wifi_3_0
poly1305_neon          20480  1 libchacha20poly1305
chacha_neon            20480  1 libchacha20poly1305
libchacha              16384  1 chacha_neon
libblake2s             16384  1 wireguard
libblake2s_generic     20480  1 libblake2s
veth                   24576  0 
iptable_raw            16384  1 
xt_ein                 28672  0 
ipt_SAME               16384  0 
xt_NETMAP              16384  0 
xt_REDIRECT            16384  0 
xt_MASQUERADE          16384  1 
xt_nat                 16384  6 
iptable_nat            16384  1 
iptable_mangle         16384  1 
ip6t_eui64             16384  0 
ip6t_ipv6header        16384  0 
ip6t_REJECT            16384  0 
nf_reject_ipv6         16384  2 nft_reject_inet,ip6t_REJECT
qca_spectral          172032  1 qca_ol
ip6table_filter        16384  1 
ip6_tables             28672  4 ip6table_nat,ip6table_mangle,ip6table_raw,ip6table_filter
ipq_cnss2             323584  1 qca_ol
nf_conntrack_ipv6      16384  0 
mem_manager            40960  1 qca_ol
ipt_TARPIT             20480  0 
ipt_REJECT             16384  4 
nf_reject_ipv4         16384  2 nft_reject_inet,ipt_REJECT
iptable_filter         16384  1 
nf_defrag_ipv4         16384  1 nft_tproxy
ipt_psd                20480  1 
umac                 4583424  6 monitor,wifi_3_0,qca_ol,qca_spectral
ip_tables              28672  4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter
ipt_snif               16384  0 
snif                   20480  1 ipt_snif
xt_tls                 16384  0 
xt_layer7              24576  0 
xt_HL                  16384  1 
xt_DSCP                16384  1 
xt_TCPMSS              16384  0 
xt_CT                  20480  0 
xt_policy              16384  5 
xt_addrtype            16384  2 
xt_hl                  16384  1 
xt_realm               16384  0 
xt_physdev             16384  0 
xt_length              16384  2 
xt_connbytes           16384  6 
xt_helper              16384  0 
xt_tcpmss              16384  0 
xt_dscp                16384 13 
xt_hashlimit           28672  1 
xt_statistic           20480  0 
xt_string              16384  0 
xt_connmark            20480 224 
xt_conntrack           16384 24 
xt_multiport           16384 78 
xt_mark                16384 43 
xt_mac                 16384  0 
xt_tcpudp              16384  8 
ts_kmp                 16384  0 
xt_misc                24576 97 
ipt_ulog               16384  8 
x_tables               32768 55 nft_compat,xt_nfacct,xt_NFLOG,xt_NFQUEUE,xt_ipvs,xt_comment,ip6t_NPT,ip6table_mangle,ip6table_raw,iptable_raw,xt_ein,ipt_SAME,xt_NETMAP,xt_REDIRECT,xt_MASQUERADE,xt_nat,iptable_mangle,ip6t_eui64,ip6t_ipv6header,ip6t_REJECT,ip6table_filter,ip6_tables,ipt_TARPIT,ipt_REJECT,iptable_filter,ipt_psd,ip_tables,ipt_snif,xt_tls,xt_layer7,xt_HL,xt_DSCP,xt_TCPMSS,xt_CT,xt_policy,xt_addrtype,xt_hl,xt_realm,xt_physdev,xt_length,xt_connbytes,xt_helper,xt_tcpmss,xt_dscp,xt_hashlimit,xt_statistic,xt_string,xt_connmark,xt_conntrack,xt_multiport,xt_mark,xt_mac,xt_tcpudp,xt_misc,ipt_ulog
nf_nat_h323            16384  0 
nf_conntrack_h323      53248  1 nf_nat_h323
nf_nat_ftp             16384  0 
nf_conntrack_ftp       20480  1 nf_nat_ftp
nf_conntrack_ipv4      16384  0 
nf_nat                 45056 15 nft_redir,nft_nat,nft_masq,nft_chain_nat,ip_vs_ftp,ip6table_nat,xt_ein,ipt_SAME,xt_NETMAP,xt_REDIRECT,xt_MASQUERADE,xt_nat,iptable_nat,nf_nat_h323,nf_nat_ftp
nf_conntrack_netlink    45056  0 
nfnetlink              16384  8 ip_set,nft_compat,nf_tables,nfnetlink_log,nfnetlink_queue,nfnetlink_osf,nfnetlink_acct,nf_conntrack_netlink
xhci_plat_hcd          16384  0 
xhci_hcd              102400  1 xhci_plat_hcd
c2glue                 16384  2 qca_ol,umac
qdf                   192512  5 monitor,wifi_3_0,qca_ol,qca_spectral,umac
qrtr_smd               16384  0 
qcom_q6v5_mpd          28672  0 
qcom_q6v5_wcss         28672  1 
mdt_loader             16384  2 qcom_q6v5_mpd,qcom_q6v5_wcss
qcom_q6v5              16384  2 qcom_q6v5_mpd,qcom_q6v5_wcss
qcom_common            16384  2 qcom_q6v5_mpd,qcom_q6v5_wcss
qcom_sysmon            16384  2 qcom_q6v5_mpd,qcom_q6v5_wcss
usbcore               172032  9 option,usb_wwan,usbserial,mbim,btusb,usb_storage,xhci_plat_hcd,xhci_hcd
rpmsg_char             20480  0 
cfg80211              253952  4 qca_ol,qca_spectral,umac,qdf
dwc3                   24576  0 
rb                     16384  1 
hk_eth                135168  0 
prestera_pci           16384  0 
phy_msm_ssusb_qmp      20480  1 
prestera_dx_mac       798720  0 
phy_msm_qusb           16384  4 
dwc3_qcom              16384  0 
usb_common             16384  4 xhci_plat_hcd,usbcore,dwc3,dwc3_qcom
dwc3_of_simple         16384  0 
vrf                    28672  0 [permanent]
pcie_qcom              40960  0 
ipqhwmon               16384  0 
ts                     24576  0 
ticker                 20480  1 
btrtl                  20480  1 btusb
btintel                24576  1 btusb
btbcm                  20480  1 btusb
bluetooth             282624  4 btusb,btrtl,btintel,btbcm
cmac                   16384  0 
ecdh_generic           16384  1 bluetooth
ecc                    24576  1 ecdh_generic
rfkill                 24576  2 cfg80211,bluetooth
ulog                   20480  2 ipt_ulog
ledgroup               20480  0 
btest                  24576  0 
bridge2_netfilter      24576  0 
bridge2               184320  1 bridge2_netfilter
switch                 77824  3 hk_eth,prestera_dx_mac,bridge2
phy_helper            176128  3 hk_eth,prestera_dx_mac,switch
packet_hook           188416 16 mbim,vxlan2,xt_layer7,xt_misc,hk_eth,prestera_dx_mac,bridge2,switch
ac5_gwd                20480  0 
al_cause               16384  0 
stm8_fan               32768  1 al_cause
fan_i2c                36864  1 al_cause
jiffies                16384 66 
logring                49152 200 
panics                 20480  0 
flash                  65536  9 rb,hk_eth,prestera_pci,prestera_dx_mac,ts,phy_helper,panics