Merge pull request #1105 from konstruktoid/CVE-2026-31431

disable algif_aead

Author: konstruktoid

defaults/main.yml

@@ -450,6 +450,7 @@ manage_users: true
 
 # Misc kernel modules to block and blacklist.
 misc_modules_blocklist:
+  - "algif_aead"
   - "bluetooth"
   - "bnep"
   - "btusb"

meta/argument_specs.yml

@@ -768,7 +768,7 @@ argument_specs:
         description: "Misc kernel modules to block and blacklist."
         type: "list"
         elements: "str"
-        default: "['bluetooth', 'bnep', 'btusb', 'can', 'cpia2', 'firewire-core', 'floppy', 'ksmbd', 'n_hdlc', 'net-pf-31', 'pcspkr', 'soundcore', 'thunderbolt',
+        default: "['algif_aead', 'bluetooth', 'bnep', 'btusb', 'can', 'cpia2', 'firewire-core', 'floppy', 'ksmbd', 'n_hdlc', 'net-pf-31', 'pcspkr', 'soundcore', 'thunderbolt',
           'usb-midi', 'usb-storage', 'uvcvideo', 'v4l2_common']"
       net_modules_blocklist:
         description: "Network kernel modules to block and blacklist."