documentation technical

technology software

forum

social_media

news/blog

English

flarum_session

You're looking at domain 'community.enhance.com' on the commercial generic top-level domain (.com) and includes subdomain 'community'. Count 7 characters in 'enhance' holding three vowels versus four consonants. Tokenizing the label suggests one word: enhance. No strong language cues emerged from the frequency lists.

Twitter Follow Button

Twitter settings iframe

173460e89e6a7244218badae2016f65c48a3eae9d400802273eeca18b07336f1

09d377382db89f9012b929a75bc5d58974a0edf3dbd7e002b1b513e0b24d5d9a

6e9b5e9393d2213fddbd7971b86ce78ee8a49610f3ecc36835ba30d35d430c72

b07736502ebc0cc0dac313c5117e5c2dee5ee5b0f140c6b1cedf441257e4b579

9f19cebc1d4441ae1f0ffc696a42628b9f865fe5d99deda1f1e8cd5bec878888

426e16d014775c77916610f675f58880874c645817ed26d01873dde3466e6007

fc4a48f0a9f26e32fe36bef83d908aafa46315dcfd653608f64ec5981507b0bd

fa962357515eba9605354afd5d0ec4f5128fa29b524c5aa027b1fda836af3dc0

2cf1f7b2c9003b3d80aefc3c44c9f1b3fa26587f9114d97808679afe9bc2ab88

https://cert.europa.eu/publications/security-advisories/2026-005/

https://github.com/Webhosting4U/Copy-Fail_Detect_and_mitigate_CVE-2026-31431

https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available

https://ubuntu.com/security/notices/USN-8226-1

width=device-width, initial-scale=1, maximum-scale=1, minimum-scale=1

viewport

Our forum offers a space to ask and answer questions, share technical advice and help guide the direction of Enhance.

description

theme-color

Bs

This site can’t be reached

The webpage at https: //community. enhance. com/d/3859-critical-
linux-kernel-bug-copy-fail-cve-2026-31434 might be temporarily
down or it may have moved permanently to a new web address

ERR_TUNNEL_CONNECTTON_FATLED


GoDaddy.com, LLC

ENHANCE.COM

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


            document.getElementById('flarum-loading').style.display = 'block';
            var flarum = {extensions: {}};
        

Critical Linux kernel bug ("Copy Fail") CVE-2026-31431

A critcal CVE has been released, affecting multiple distributions of linux, including Ubuntu. 
Apologies to those who saw my response to <a href="https://community.enhance.com/u/cPFence" class="UserMention">@cPFence</a> CVE today.... This one is different, but just as bad.

For Ubuntu any release older than 26.04 is affected. <a href="https://cert.europa.eu/publications/security-advisories/2026-005/" rel="ugc nofollow">https://cert.europa.eu/publications/security-advisories/2026-005/</a>

You can run:
<pre><code>echo "install algif_aead /bin/false" &gt; /etc/modprobe.d/disable-algif.conf
rmmod algif_aead 2&gt;/dev/null || true</code><script async="" crossorigin="anonymous" data-hljs-style="github" integrity="sha384-ryUuFF+lg0ZHUA7DaXhvSekelOyHvqE2+5VtldjgFG+Y99aBpL8SNXEPubG6UTNv" src="https://cdn.jsdelivr.net/gh/s9e/hljs-loader@1.0.32/loader.min.js"></script></pre>

To remedy this immediately.

Do this now everyone...

Thank you for sharing this!

I’d run this slightly cleaner version to handle dependencies intelligently on all servers:

If you’re using cPFence, you can open all servers at once, run this from your main cp server:

<pre><code>cpfence --multirun</code><script async="" crossorigin="anonymous" data-hljs-style="github" integrity="sha384-ryUuFF+lg0ZHUA7DaXhvSekelOyHvqE2+5VtldjgFG+Y99aBpL8SNXEPubG6UTNv" src="https://cdn.jsdelivr.net/gh/s9e/hljs-loader@1.0.32/loader.min.js"></script></pre>

Apply the mitigation:

<pre><code>echo "install algif_aead /bin/false" | sudo tee /etc/modprobe.d/disable-algif.conf
sudo modprobe -r algif_aead 2&gt;/dev/null || true</code><script async="" crossorigin="anonymous" data-hljs-style="github" integrity="sha384-ryUuFF+lg0ZHUA7DaXhvSekelOyHvqE2+5VtldjgFG+Y99aBpL8SNXEPubG6UTNv" src="https://cdn.jsdelivr.net/gh/s9e/hljs-loader@1.0.32/loader.min.js"></script></pre>

Verify:

<pre><code>modprobe -n -v algif_aead
lsmod | grep algif_aead || echo "algif_aead not loaded"
cat /etc/modprobe.d/disable-algif.conf</code><script async="" crossorigin="anonymous" data-hljs-style="github" integrity="sha384-ryUuFF+lg0ZHUA7DaXhvSekelOyHvqE2+5VtldjgFG+Y99aBpL8SNXEPubG6UTNv" src="https://cdn.jsdelivr.net/gh/s9e/hljs-loader@1.0.32/loader.min.js"></script></pre>

<a href="https://community.enhance.com/d/3559/2" class="PostMention" data-id="29782">cPFence</a> 
Nice work as always mate!

First time I've used multirun - awesome stuff!

<a href="https://community.enhance.com/d/3559/2" class="PostMention" data-id="29782">cPFence</a> 

cpfence --multirun

I was using clusterssh.

I didn't know about this function.

I just tested it. Very good. Sensational.

here is a detection and mitigation script to run your self: 
<a href="https://github.com/Webhosting4U/Copy-Fail_Detect_and_mitigate_CVE-2026-31431" rel="ugc nofollow">https://github.com/Webhosting4U/Copy-Fail_Detect_and_mitigate_CVE-2026-31431</a>

<a href="https://community.enhance.com/u/Swiptly" class="UserMention">@Swiptly</a> thank you for posting. We have sent an email to all Enhance customers. This one is particularly scary because it's trivially easy to exploit.

<a href="https://community.enhance.com/d/3559/5" class="PostMention" data-id="29788">Adam</a> 

Thank you for the email.

It's VERY IMPORTANT.

I only found out about this because of the email Enhance sent.

<a href="https://community.enhance.com/d/3559/5" class="PostMention" data-id="29788">Adam</a> 
Cheers <a href="https://community.enhance.com/u/Adam" class="UserMention">@Adam</a> ,great work sending this to all Enhance customers. I believed this one was worthy of the alarm bells. High severity and relatively quick fix.

<a href="https://community.enhance.com/d/3559/5" class="PostMention" data-id="29788">Adam</a> Thank you very much Adam for the mail-in notice. Coming to the forum and reading them has been very helpful. Greetings to all.

Thanks for posting and thanks Enhance for the email!

Thanks for the email updates and <a href="https://community.enhance.com/u/cPFence" class="UserMention">@cPFence</a> for the recommendation of multirun. Made actioning super quick. 👍️

Ubuntu have released a fix/patch. Read carefully: <a href="https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available" rel="ugc nofollow">https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available</a>

<a href="https://community.enhance.com/d/3559/10" class="PostMention" data-id="29793">xyzulu</a> The website is down here.

Thanks for the e-mail <a href="https://community.enhance.com/u/Adam" class="UserMention">@Adam</a>. be sure to run the fix on every server serious CVE.

From: <a href="https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available" rel="ugc nofollow">https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available</a>

<code>grep -qE '^algif_aead ' /proc/modules &amp;&amp; echo "Affected module is loaded" || echo "Affected module is NOT loaded"</code> 
^ allows you to check if you are patched. You DO NOT want the module to be loaded.. ie NOT loaded is a good result.

<a href="https://community.enhance.com/d/3559/13" class="PostMention" data-id="29796">xyzulu</a> if the Linux Kernel patch is released, will affected module algif will be overwritten?

<a href="https://community.enhance.com/d/3559/14" class="PostMention" data-id="29797">franco</a> apt ubuntu archives in GB also down

<a href="https://community.enhance.com/d/3559/14" class="PostMention" data-id="29797">franco</a> 

I imagine it's getting a lot of traffic. At least for Ubuntu users, this is the "source" of the fix. 

Sure, the word got out via other places (some just trying to make a name for themselves, and some no doubt tricking people into doing something inadvertently malicious to their own systems). I appreciate the notification from Enhance, but was cautious until I was able to find this Ubuntu official page on this vulnerability.

From: <a href="https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available" rel="ugc nofollow">https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available</a> (but you should confirm everything yourself)

<blockquote class="uncited"><div>Manual mitigation (alternative) 
If you cannot apply the userspace mitigation through an upgrade of the kmod package, you can configure it manually on your system using the instructions in this section.

Block the module by creating a /etc/modprobe.d/manual-disable-algif_aead.conf file. This is the same action that the kmod update performs.

<code>echo "install algif_aead /bin/false" | sudo tee /etc/modprobe.d/manual-disable-algif_aead.conf</code> 
Unload the module, in case it is already loaded:

<code>sudo rmmod algif_aead 2&gt;/dev/null</code> 
Check whether the module is still loaded:

<code>grep -qE '^algif_aead ' /proc/modules &amp;&amp; echo "Affected module is loaded" || echo "Affected module is NOT loaded"</code> 
Unloading the module could affect currently running applications. Similarly, if it is currently in use, removing the module might fail. In these instances, a system reboot should trigger the applications to fallback to non-accelerated cryptographic functions:

<code>sudo reboot</code></div></blockquote>

<blockquote class="uncited"><div><a href="https://community.enhance.com/d/3559/17" class="PostMention" data-id="29801">wcors</a> if the Linux Kernel patch is released, will affected module algif will be overwritten?</div></blockquote>

I'm not clear on your question.. but future updates to the kernel from Ubuntu upstream are not going to reverse this patch/fix that they have released.

Thanks for sharing this, very helpful. 🙂

If you are running Ubuntu they already released a mitigation here <a href="https://ubuntu.com/security/notices/USN-8226-1" rel="ugc nofollow">https://ubuntu.com/security/notices/USN-8226-1</a> until the kernels can be patched.

I just did a standard <code>sudo apt update -y &amp;&amp; sudo apt upgrade -y</code> to get the patched version of <code>kmod</code> until they release a kernel update.

Yes I did server reboots, however they also provide rebootless options here <a href="https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available" rel="ugc nofollow">https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available</a>, along with the other migration options posted in this tread for those that can't so easily reboot their servers..

Happy patching everybody!

Get help setting up, configuring, and scaling Enhance.

Technical Advice

Enhance Control Panel - Community

Welcome to the Enhance community

For topics that don't fit in to any other category. 

General Discussion

Feature Request

Known bugs being worked on alongside the development of roadmapped features.

Dev Log

Reserved for discussions on specific releases. 

Release Notes

Translations

This tag is reserved for advertisements from packaged services/products that integrate with Enhance.

Potential advertisers must seek approval. Please see guidelines - 
https://community.enhance.com/d/2366-new-community-forum-guidelines-please-read-me

Third party approved AD


            const data = JSON.parse(document.getElementById('flarum-json-payload').textContent);
            document.getElementById('flarum-loading').style.display = 'none';

            try {
                flarum.core.app.load(data);
                flarum.core.app.bootExtensions(flarum.extensions);
                flarum.core.app.boot();
            } catch (e) {
                var error = document.getElementById('flarum-loading-error');
                error.innerHTML += document.getElementById('flarum-content').textContent;
                error.style.display = 'block';
                throw e;
            }
        

MySQL

Flarum

jsDelivr

Twitter

Critical Linux kernel bug ("Copy Fail") CVE-2026-31431 - Enhance Control Panel - Community

regular

platform.twitter.com

✅ Low Risk - https://community.enhance.com/d/3559-critical-linux-kernel-bug-copy-fail-cve-2026-31431

Requests	IP Address	Location	AS Autonomous System
23	139.162.229.41	London, England, United Kingdom	AS63949Akamai Connected Cloud
23	1	-	-

Security Scan Report: community.enhance.com

Summary

AI Security Verdict

Safe Website

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History