Skip to content

[Backport release-1.2] fix(talos): bump Talos to v1.12.7 (CVE-2026-31431) - #2548

Merged
Andrei Kvapil (kvaps) merged 1 commit into
release-1.2from
backport-2545-to-release-1.2
May 1, 2026
Merged

[Backport release-1.2] fix(talos): bump Talos to v1.12.7 (CVE-2026-31431)#2548
Andrei Kvapil (kvaps) merged 1 commit into
release-1.2from
backport-2545-to-release-1.2

Conversation

@github-actions

@github-actions github-actions Bot commented May 1, 2026

Copy link
Copy Markdown

Description

Backport of #2545 to release-1.2.

@kvaps @claude @github-actions
fix(talos): bump Talos to v1.12.7 (CVE-2026-31431)
1459882 
Bumps Talos Linux from v1.12.6 to v1.12.7, which includes the kernel
fix for CVE-2026-31431 ("Copy Fail") — an unprivileged-to-root local
privilege escalation in the Linux kernel crypto subsystem (algif_aead).

Also refreshes the bundled system extension digests (amd-ucode, amdgpu,
bnx2-bnx2x, i915, intel-ice-firmware, qlogic-firmware, drbd, zfs) to
their 1.12.7-aligned builds.

Generated via `make update` in packages/core/talos.

Co-Authored-By: Claude <[email protected]>
Signed-off-by: Andrei Kvapil <[email protected]>
(cherry picked from commit 8549f3b)
@github-actions github-actions Bot mentioned this pull request May 1, 2026
Merged
@dosubot dosubot Bot added size/XS This PR changes 0-9 lines, ignoring generated files area/platform Issues or PRs related to platform infrastructure (bundle, flux, talos, installer) area/release Issues or PRs related to release tooling (changelog, backport, release pipeline) kind/backport-previous Categorizes issue or PR as requiring a backport to the previous release line security Security-related issues and features security/fixed Fix released labels May 1, 2026
@kvaps
Andrei Kvapil (kvaps) merged commit 702a6f9 into release-1.2 May 1, 2026
7 checks passed
@kvaps
Andrei Kvapil (kvaps) deleted the backport-2545-to-release-1.2 branch May 1, 2026 10:56
@github-actions

github-actions Bot commented May 1, 2026

Copy link
Copy Markdown
Author

Backport failed for release-1.2, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin release-1.2
git worktree add -d .worktree/backport-2548-to-release-1.2 origin/release-1.2
cd .worktree/backport-2548-to-release-1.2
git switch --create backport-2548-to-release-1.2
git cherry-pick -x 145988206d92944550ae269b425dc352a23537c5

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kvaps Andrei Kvapil (kvaps) Awaiting requested review from kvaps kvaps is a code owner
@lllamnyp Timofei Larkin (lllamnyp) Awaiting requested review from lllamnyp lllamnyp is a code owner
@lexfrei Aleksei Sviridkin (lexfrei) Awaiting requested review from lexfrei lexfrei is a code owner
@androndo Andrey Kolkov (androndo) Awaiting requested review from androndo androndo is a code owner
@IvanHunters IvanHunters Awaiting requested review from IvanHunters IvanHunters is a code owner
@sircthulhu Kirill Ilin (sircthulhu) Awaiting requested review from sircthulhu sircthulhu is a code owner

Assignees

No one assigned

Labels

area/platform Issues or PRs related to platform infrastructure (bundle, flux, talos, installer) area/release Issues or PRs related to release tooling (changelog, backport, release pipeline) kind/backport-previous Categorizes issue or PR as requiring a backport to the previous release line security/fixed Fix released security Security-related issues and features size/XS This PR changes 0-9 lines, ignoring generated files

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@kvaps