Since algif_aead is implicated in the exploit, I created an ansible playbook which blacklists algif_aead if nothing’s referring to it to avoid any potential exploits. None of my machines were actively using it. Extracted this single playbook out as a gist in case you also have multiple machines to quickly patch. Comments