DSA-2026-244: Security Update for Dell Automation Platform for Multiple Third-Party Component Vulnerabilities

Resumen: Dell Automation Platform remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Este artículo se aplica a Este artículo no se aplica a Este artículo no está vinculado a ningún producto específico. No se identifican todas las versiones del producto en este artículo.

Impacto

High

Detalles

Third-party Component CVES More Information
Keycloak CVE-2026-3047, CVE-2026-3009, CVE-2026-2603, CVE-2026-2092, CVE-2025-13467, CVE-2026-2575, CVE-2026-2733, CVE-2026-1190, CVE-2025-5416 https://nvd.nist.gov/vuln/search This hyperlink is taking you to a website outside of Dell Technologies.
OpenSSL CVE-2025-15467 https://nvd.nist.gov/vuln/search This hyperlink is taking you to a website outside of Dell Technologies.
GnuPG CVE-2026-24882 https://nvd.nist.gov/vuln/search This hyperlink is taking you to a website outside of Dell Technologies.
Python cryptography library CVE-2026-26007 https://nvd.nist.gov/vuln/search This hyperlink is taking you to a website outside of Dell Technologies.
systemd CVE-2026-4105 https://nvd.nist.gov/vuln/search This hyperlink is taking you to a website outside of Dell Technologies.
SUSE CVE-2026-31431, CVE-2026-43500, CVE-2026-46300, CVE-2026-46333 https://www.suse.com/ This hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies recomienda que todos los clientes tengan en cuenta tanto la puntuación base como cualquier otra puntuación ambiental y temporal relevante que pueda afectar la posible gravedad asociada con la vulnerabilidad de seguridad en particular.

Corrección y productos afectados

Product Affected Versions Remediated Versions Link
Dell Automation Platform Versions prior to 2.1.0.0 Version 2.1.0.0 or later https://www.dell.com/support/product-details/product/dell-automation-platform-components/drivers

 

Product Affected Versions Remediated Versions Link
Dell Automation Platform Versions prior to 2.1.0.0 Version 2.1.0.0 or later https://www.dell.com/support/product-details/product/dell-automation-platform-components/drivers

 

Soluciones alternativas y mitigaciones

CVE ID Workaround and Mitigation
CVE-2026-31431

For customers who configure general Linux shell access on DAP-Server nodes or want to implement defense-in-depth measures, Dell recommends adding a filter to block dynamic loading of the affected kernel module.

1.    Disable Vulnerable Kernel Module Loading From the DAP-Server Linux shell as system admin, add the following filter to the system configuration:

#Restrict loading of the affected kernel module echo "install algif_aead /bin/false" | sudo tee /etc/modprobe.d/disable-algif-aead.conf

After applying the configuration, update module preferences: sudo depmod –a 

2.    Verification To verify the module is blocked:

#Check if the module is active lsmod | grep algif_aead

#If necessary, unload the module if it is currently loaded sudo modprobe -r algif_aead

#Attempt to load the module (should fail) sudo modprobe algif_aead

#Expected output: modprobe: ERROR: ../libkmod/libkmod-module.c:1047 command_do() Error running install command '/bin/false' for module algif_aead: retcode 1

Persistence

The configuration will persist across system reboots. No additional steps are required.

 

Historial de revisiones

RevisionDateDescription
1.02026-06-05Initial Release
2.02026-07-14

Updated the following tables with the Version 2.1.0.0 release

  • Third Party Components
  • Affected Products and Remediation 

 

Información relacionada

Productos afectados

Dell Automation Platform, Dell Automation Platform Components
Propiedades del artículo
Número del artículo: 000473583
Tipo de artículo: Dell Security Advisory
Última modificación: 14 jul 2026
Encuentre respuestas a sus preguntas de otros usuarios de Dell
Servicios de soporte
Compruebe si el dispositivo está cubierto por los servicios de soporte.