From 1769bb59b225196c1099e56c4dd95958c7c7dae5 Mon Sep 17 00:00:00 2001
From: Frederick Jansen <frederick.jansen@gmail.com>
Date: Thu, 30 Apr 2026 13:54:40 -0400
Subject: [PATCH] fix(cvm-agent): add fix for copy.fail in cvms

---
 artifacts/cvm-image/setup.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/artifacts/cvm-image/setup.sh b/artifacts/cvm-image/setup.sh
index 4217e8ed..e38fd043 100644
--- a/artifacts/cvm-image/setup.sh
+++ b/artifacts/cvm-image/setup.sh
@@ -102,6 +102,10 @@ apt purge -y linux-headers-*
 apt -y clean
 rm -rf /var/lib/apt/lists/* /var/log/*
 
+# Disable algif_aead for CVE-2026-31431
+echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf
+rmmod algif_aead 2>/dev/null || true
+
 # Remove /etc/fstab since we are in control of the boot process.
 rm /etc/fstab