fix-cve-2026-3143

Diagnostics and remediation for CVE-2026-31431 (copy fail)

Installation Copy the installation script to the clipboard and run it in the command line

sudo apt install git && cd ~ &&
git clone https://github.com/ClimbMunchkin/fix-cve-2026-3143.git fix-cve-2026-3143 &&
chmod +x ~/fix-cve-2026-3143/fix-cve-2026-31431.sh && cd ~/fix-cve-2026-3143

Running and usage

1. Full diagnostics

./fix-cve-2026-31431.sh --check

Depending on the diagnostics, you need to apply one of the options: 2a - for a loadable module, 2b - for a module built into the kernel

2a. Apply the fix (with verification!) for a loadable module

sudo ./fix-cve-2026-31431.sh --fix

2b. For builtin modules (RHEL, some kernels)

sudo ./fix-cve-2026-31431.sh --initcall

3. Check the status after the fix

./fix-cve-2026-31431.sh --status

4. After a kernel update — remove the block

sudo ./fix-cve-2026-31431.sh --remove