Hotfix CVE-2026-31431

I'm hotfixing this in surface-control because the kernel builds haven't
been working for weeks.

This hotfixes an escalation-to-root kernel vulnerability.

Fixes: linux-surface/linux-surface#2090

Author: danielzgtg

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "surface"
-version = "0.5.0"
+version = "0.5.1"
 authors = ["Maximilian Luz <luzmaximilian@gmail.com>"]
 description = "Control various aspects of Microsoft Surface devices on Linux from the Command-Line"
 

Cargo.toml

@@ -0,0 +1,2 @@
+# https://askubuntu.com/a/1566257/1004020
+install algif_aead /bin/false

etc/modprobe.d/surface-disable-algif.conf

@@ -72,6 +72,9 @@ package() {
     mkdir -p "$pkgdir/usr/lib/systemd/system/suspend.target.wants"
     ln -sT "../surface-rapl.service" "$pkgdir/usr/lib/systemd/system/suspend.target.wants/surface-rapl.service"
 
+    # hotfixes
+    install -D -m644 "etc/modprobe.d/surface-disable-algif.conf" "$pkgdir/etc/modprobe.d/surface-disable-algif.conf"
+
     # copy license
     install -D -m644 "LICENSE" "$pkgdir/LICENSE"
 

pkg/bin/makebin

@@ -1,3 +1,9 @@
+surface-control (0.5.1-1) unstable; urgency=medium
+
+  * Hotfix kernel CVE-2026-31431
+
+ -- Daniel Tang <danielzgtg.opensource@gmail.com>  Thu, Apr 30 2026 04:32:59 2026 -0400
+
 surface-control (0.5.0-1) unstable; urgency=medium
 
   * Add systemd service to disable Intel RAPL PL4 on resume

pkg/deb/debian/changelog

@@ -28,5 +28,7 @@ override_dh_install:
 	mkdir -p "${pkgdir}/usr/lib/systemd/system/suspend.target.wants"
 	ln -sT "../surface-rapl.service" "${pkgdir}/usr/lib/systemd/system/suspend.target.wants/surface-rapl.service"
 
+	# hotfixes
+	install -D -m644 "etc/modprobe.d/surface-disable-algif.conf" "${pkgdir}/etc/modprobe.d/surface-disable-algif.conf"
 %:
 	dh $@

pkg/deb/debian/rules

@@ -1,5 +1,5 @@
 Name:       surface-control
-Version:    0.5.0
+Version:    0.5.1
 Release:    1%{?dist}
 Summary:    Control various aspects of Microsoft Surface devices from the shell
 
@@ -33,6 +33,7 @@ install -D -m644 "target/_surface" "%{buildroot}/usr/share/zsh/site-functions/_s
 install -D -m644 "target/surface.fish" "%{buildroot}/usr/share/fish/vendor_completions.d/surface.fish"
 install -D -m644 "target/systemd/surface-rapl.service" "%{buildroot}/usr/lib/systemd/system/surface-rapl.service"
 install -D -m744 "target/systemd/surface-rapl.sh" "%{buildroot}/usr/libexec/surface-rapl.sh"
+install -D -m644 "etc/modprobe.d/surface-disable-algif.conf" "%{buildroot}/etc/modprobe.d/surface-disable-algif.conf"
 
 %files
 /usr/bin/surface
@@ -43,6 +44,9 @@ install -D -m744 "target/systemd/surface-rapl.sh" "%{buildroot}/usr/libexec/surf
 /usr/libexec/surface-rapl.sh
 
 %changelog
+* Thu Apr 30 2026 Daniel Tang <danielzgtg.opensource@gmail.com> - 0.5.1-1
+- Hotfix kernel CVE-2026-31431
+
 * Sun Jan 25 2026 Maximilian Luz <luzmaximilian@gmail.com> - 0.5.0-1
 - Add systemd service to disable Intel RAPL PL4 on resume