scriptzteam/Paranoid-Copy-Fail-CVE-2026-31431

GitHub: scriptzteam/Paranoid-Copy-Fail-CVE-2026-31431

通过禁用 Linux 内核 AF_ALG 及 algif_* 模块来缓解 CVE-2026-31431 漏洞并缩减内核加密接口攻击面的加固脚本。

Stars: 2 | Forks: 1

``` # ================================ # Paranoid AF_ALG hardening script # ================================ # Blocks all user-space kernel crypto interfaces (AF_ALG + algif_* modules) # Mitigates CVE-2026-31431 and reduces future attack surface # # Safe for normal systems (SSH, TLS, LUKS, WireGuard) # Only breaks rare apps using AF_ALG sockets directly # ================================ ```
标签:GitHub Advanced Security, Linux, 内核模块, 安全加固, 安全资源, 攻击面收敛, 系统运维