PRs for CVE-2026-31431

[dcasota]

Describe the bug

Please consider the three PRs #1648, #1649, #1650. They contain the backport patch for CVE-2026-31431.

Reproduction steps

CVE-2026-31431

Expected behavior

CVE-2026-31431 solved

Additional context

No response

[dcasota]

thanks @YustasSwamp !
Closed. #1650 (comment)

[dcasota]

@YustasSwamp fyi every branch's config_x86_64_acvp (FIPS/ACVP validation kernel) has CONFIG_CRYPTO_USER_API_AEAD=y

vmware/photon branch	Path inside the branch	Kernel version	Status
5.0	SPECS/91/linux/config_x86_64_acvp	6.1.169	=y
common (consumed by 5.0 ≥92)	SPECS/linux/v6.1/config_x86_64_acvp	6.1.83	=y
common (consumed by 5.0 ≥92)	SPECS/linux/v6.12/config_x86_64_acvp	6.12.78	=y
6.0	SPECS/linux/config_x86_64_acvp	6.1.158	=y

photon-kernel-cve-gate

For the sake of completeness, here is the snapshotted skill as well: photon-kernel-cve-gate.zip
There is improvement room for this spec-driven development approach. Identifying and addressing these areas can help optimize the process and enhance overall outcomes, and it shouldn't produce false positives.
To import, run unzip /root/photon-kernel-cve-gate.zip -d ~/.claude/skills/ && chmod +x ~/.claude/skills/photon-kernel-cve-gate/bin/*.sh, then /photon-kernel-cve-gate from any Claude Code session. Import for any other AI CLI, consult e.g. "where it lives" section in https://github.com/yigitkonur/cli-continues#what-gets-extracted