Merge pull request 'fix CVE-2026-31431' (#31) from develop into release-25.11

Reviewed-on: #31
2026-05-02 23:11:14 +02:00 · 2026-05-02 23:11:14 +02:00 · 5f6ad9ecf5
commit 5f6ad9ecf5
parent e76a05b512 21b53744cd
2 changed files with 9 additions and 0 deletions
--- a/modules/nixos/common/boot.nix
+++ b/modules/nixos/common/boot.nix
@ -0,0 +1,8 @@
+{ lib, pkgs, ... }:
+
+{
+  # fix CVE-2026-31431
+  boot.kernelPackages = lib.mkIf (lib.versionOlder pkgs.linux.version "6.18.22") (
+    lib.mkDefault pkgs.linuxPackages_6_18
+  );
+}
--- a/modules/nixos/common/default.nix
+++ b/modules/nixos/common/default.nix
@ -1,5 +1,6 @@
 {
  imports = [
+    ./boot.nix
    ./environment.nix
    ./htop.nix
    ./nationalization.nix