erroneo.us
Search all guides⌘K

Digest · Wednesday

Security digest: April 29, 2026

1 editorial brief and 6 critical advisories.

All digests · RSS · Markdown

Take stock

  • Act now: Copy Fail. Anyone running Linux kernels 4.14+ without the fix where untrusted or semi-trusted code runs: CI/CD runners, Kubernetes and Docker hosts, multi-user and hosting servers.
  • Maven: 2 critical advisories (com.coravy.hudson.plugins.github:github, org.hyperledger.fabric-sdk-java:fabric-sdk-java). Check with mvn dependency:tree -Dincludes=<groupId>:<artifactId>.
  • npm: 2 critical advisories (n8n). Check with npm audit (or: npm ls <package>).
  • Composer (PHP): 2 critical advisories (phpoffice/phpspreadsheet, cockpit-hq/cockpit). Check with composer audit.
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Act now

· Vulnerability · CVE-2026-31431

Copy Fail: Exploited Linux Kernel Root Exploit Since 2017

Any Linux box that runs code from more than one trust level (CI runners, container hosts, shared servers) needs a patched kernel and reboot now; single-user machines can patch on a short cycle.

Must act: Anyone running Linux kernels 4.14+ without the fix where untrusted or semi-trusted code runs: CI/CD runners, Kubernetes and Docker hosts, multi-user and hosting servers.

Can relax: Hosts already on fixed stable kernels (5.10.254, 5.15.204, 6.1.170, 6.6.137, 6.12.85, 6.18.22, 6.19.12, 7.0+) or vendor kernels with the backport, after a reboot.

  1. Install your distribution's fixed kernel and reboot (uname -r to confirm the running kernel changed)
  2. Patch CI runners, container hosts and multi-tenant servers first
  3. If you cannot reboot yet and algif_aead is a module: echo 'install algif_aead /bin/false' > /etc/modprobe.d/disable-algif.conf && rmmod algif_aead

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 6

GitHub-reviewed advisories rated critical, published this day (Pacific time).

Composer (PHP) 2

Check: composer audit

Maven 2

Check: mvn dependency:tree -Dincludes=<groupId>:<artifactId>

npm 2

Check: npm audit (or: npm ls <package>)