
Automated detection and mitigation of CVE-2026-31431 local privilege escalation on Linux via Bash scripts and Ansible playbooks, with CIS-standard hardening for enterprise fleets.
Collection of automation scripts and playbooks for the detection and mitigation of vulnerability CVE-2026-31431 (local privilege escalation via page cache corruption in setuid binaries) on Linux systems.
cve-2026-31431-mitigator.sh: Interactive pure Bash script to audit and apply hot mitigations (blocking the algif_aead and authencesn modules via modprobe). Designed with automatic detection for the Red Hat, SUSE, and Debian families.mitigar_cve.yml: Ansible playbook for the automated deployment of the strict mitigation (CIS standard) across server fleets. Ideal for mission-critical infrastructures (RHEL, CentOS, Oracle Linux, Fedora, AlmaLinux, Rocky Linux).Run with superuser privileges:
chmod +x cve-2026-31431-mitigator.sh
sudo ./cve-2026-31431-mitigator.sh
* **`rsyslog-sre-golden-signals.sh`**: Script to configure Rsyslog, mapping system events to the four SRE "Golden Signals" (Traffic, Errors, Latency, Saturation) and setting up forwarding to a central server.