Friday is `dnf update` and `reboot` day for the machines in my homelab and the servers I run on the internet.

[jwildeboer@social.wildeboer.net]

Friday is `dnf update` and `reboot` day for the machines in my homelab and the servers I run on the internet. My machines all run Red Hat Enterprise Linux, so I know I am protected against any new threat that comes with a lot of media fanfare, because we at Red Hat stoically fix things and make the updates available. So as on every Friday, I can relax and enjoy the weekend

#SelfHost #SysAdminLife @homelab

[larvitz@burningboard.net]

@jwildeboer @homelab this week, it might be a good idea, to also look at https://access.redhat.com/solutions/7141931 and ensure, either the right errata is applied, or the mentioned mitigations are in place, if you have systems affected by Copy Fail.

[jwildeboer@social.wildeboer.net]

@Larvitz Yep, I did the `grubby --update-kernel=ALL --args="initcall_blacklist=algif_aead_init"` on all my exposed servers (and verified that all services still work afterwards). The homelab machines will wait for the kernel update. @homelab

[larvitz@burningboard.net]

@jwildeboer Great

Created a little Ansible playbook to apply the mitigation to multiple servers: https://codeberg.org/Larvitz/gists/src/branch/main/2026/20260501-CVE-2026-31431_RHEL_Mitigation.md