DSA-2026-244: Security Update for Dell Automation Platform for Multiple Third-Party Component Vulnerabilities

Summary: Dell Automation Platform remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Impact

High

Details

Third-party Component CVES More Information
Keycloak CVE-2026-3047, CVE-2026-3009, CVE-2026-2603, CVE-2026-2092, CVE-2025-13467, CVE-2026-2575, CVE-2026-2733, CVE-2026-1190, CVE-2025-5416 https://nvd.nist.gov/vuln/search This hyperlink is taking you to a website outside of Dell Technologies.
OpenSSL CVE-2025-15467 https://nvd.nist.gov/vuln/search This hyperlink is taking you to a website outside of Dell Technologies.
GnuPG CVE-2026-24882 https://nvd.nist.gov/vuln/search This hyperlink is taking you to a website outside of Dell Technologies.
Python cryptography library CVE-2026-26007 https://nvd.nist.gov/vuln/search This hyperlink is taking you to a website outside of Dell Technologies.
systemd CVE-2026-4105 https://nvd.nist.gov/vuln/search This hyperlink is taking you to a website outside of Dell Technologies.
SUSE CVE-2026-31431, CVE-2026-43500, CVE-2026-46300, CVE-2026-46333 https://www.suse.com/ This hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

Product Affected Versions Remediated Versions Link
Dell Automation Platform Versions prior to 2.1.0.0 Version 2.1.0.0 or later https://www.dell.com/support/product-details/product/dell-automation-platform-components/drivers

 

Product Affected Versions Remediated Versions Link
Dell Automation Platform Versions prior to 2.1.0.0 Version 2.1.0.0 or later https://www.dell.com/support/product-details/product/dell-automation-platform-components/drivers

 

Workarounds & Mitigations

CVE ID Workaround and Mitigation
CVE-2026-31431

For customers who configure general Linux shell access on DAP-Server nodes or want to implement defense-in-depth measures, Dell recommends adding a filter to block dynamic loading of the affected kernel module.

1.    Disable Vulnerable Kernel Module Loading From the DAP-Server Linux shell as system admin, add the following filter to the system configuration:

#Restrict loading of the affected kernel module echo "install algif_aead /bin/false" | sudo tee /etc/modprobe.d/disable-algif-aead.conf

After applying the configuration, update module preferences: sudo depmod –a 

2.    Verification To verify the module is blocked:

#Check if the module is active lsmod | grep algif_aead

#If necessary, unload the module if it is currently loaded sudo modprobe -r algif_aead

#Attempt to load the module (should fail) sudo modprobe algif_aead

#Expected output: modprobe: ERROR: ../libkmod/libkmod-module.c:1047 command_do() Error running install command '/bin/false' for module algif_aead: retcode 1

Persistence

The configuration will persist across system reboots. No additional steps are required.

 

Revision History

RevisionDateDescription
1.02026-06-05Initial Release
2.02026-07-14

Updated the following tables with the Version 2.1.0.0 release

  • Third Party Components
  • Affected Products and Remediation 

 

Related Information

Affected Products

Dell Automation Platform, Dell Automation Platform Components
Article Properties
Article Number: 000473583
Article Type: Dell Security Advisory
Last Modified: 14 Jul 2026
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.