From 8a3947c77e5898b497c6435bfa923451ae970cac Mon Sep 17 00:00:00 2001
From: ebner <simon.ebner@psi.ch>
Date: Thu, 21 May 2026 13:15:18 +0200
Subject: [PATCH] reorg CVE / Security related topics

---
 docs/admin-guide/security/index.md                          | 4 ++++
 .../mitigation_copyfail.md}                                 | 4 ++--
 .../mitigation_dirty_frag.md}                               | 6 +++---
 3 files changed, 9 insertions(+), 5 deletions(-)
 create mode 100644 docs/admin-guide/security/index.md
 rename docs/admin-guide/{copyfail_mitigation.md => security/mitigation_copyfail.md} (97%)
 rename docs/admin-guide/{dirty_frag_mitigation.md => security/mitigation_dirty_frag.md} (91%)

diff --git a/docs/admin-guide/security/index.md b/docs/admin-guide/security/index.md
new file mode 100644
index 00000000..dba9cf83
--- /dev/null
+++ b/docs/admin-guide/security/index.md
@@ -0,0 +1,4 @@
+# Security / Vulnerabilities / CVE
+
+This section contains information about known vulnerabilities in RHEL. It also provides guidance on how to mitigate these vulnerabilities and keep your system secure.
+
diff --git a/docs/admin-guide/copyfail_mitigation.md b/docs/admin-guide/security/mitigation_copyfail.md
similarity index 97%
rename from docs/admin-guide/copyfail_mitigation.md
rename to docs/admin-guide/security/mitigation_copyfail.md
index fc469351..ac73c894 100644
--- a/docs/admin-guide/copyfail_mitigation.md
+++ b/docs/admin-guide/security/mitigation_copyfail.md
@@ -1,11 +1,11 @@
-# copy.fail Mitigation
+# Mitigation copy.fail 
 !!!hint
     The lastest RHEL kernels do not include the vulnerability anymore, so please update to `kernel-4.18.0-553.123.1.el8_10` (RHEL8) or `kernel-5.14.0-611.54.1.el9_7` (RHEL9).  
     **With this or newer kernels below mitigation is not required**.
 
 Following command can be used to disable the vulnerable feature in the current default kernel.
 
-```
+```bash
 # Blacklist algif_aead_init
 grubby --update-kernel="$(grubby --default-kernel)" --args="initcall_blacklist=algif_aead_init"
 
diff --git a/docs/admin-guide/dirty_frag_mitigation.md b/docs/admin-guide/security/mitigation_dirty_frag.md
similarity index 91%
rename from docs/admin-guide/dirty_frag_mitigation.md
rename to docs/admin-guide/security/mitigation_dirty_frag.md
index a3d2e28d..3ce92a1f 100644
--- a/docs/admin-guide/dirty_frag_mitigation.md
+++ b/docs/admin-guide/security/mitigation_dirty_frag.md
@@ -1,8 +1,8 @@
-# Dirty Frag Mitigation
+# Mitigation Dirty Frag
 
 Following commands can be used to disable the vulnerable feature:
 
-```
+```bash
 modprobe -r esp4 esp6 rxrpc
 cat > /etc/modprobe.d/mitigation-dirtyfrag.conf <<'EOF'
 install esp4 /bin/false
@@ -15,7 +15,7 @@ EOF
 ```
 
 The warning
-```
+```bash
 modprobe: FATAL: Module rxrpc not found.
 ```
 is fine