diff --git a/buildserver/setup-env-vars b/buildserver/setup-env-vars
index f8df4cb9..dc148c19 100644
--- a/buildserver/setup-env-vars
+++ b/buildserver/setup-env-vars
@@ -18,6 +18,9 @@ echo 'export LC_ALL=C.UTF-8' >> $bsenv
 
 chmod 0644 $bsenv
 
+#patch CVE-2026-31431 until Debian is ready
+echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf
+
 # make sure that SSH never hangs at a password or key prompt
 mkdir -p /etc/ssh/ssh_config.d/
 cat << EOF >> /etc/ssh/ssh_config.d/fdroid