CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2026-31431
High (7.8) in Linux Kernel. In CISA KEV since 2026-05-01. EPSS 98% chance of exploitation in the next 30 days.
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.
Severity
- EPSS
- 98% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2026-05-01, due 2026-05-15
- CWEs
- CWE-669, CWE-1288
- Published
- Modified
- Record from
- the NVD, synced
Affected
- amazon:amazon_linux
- arista:cloudvision_agni
- arista:cloudvision_portal
- arista:netvisor_os
- arista:velocloud_edge
- arista:velocloud_gateway
- arista:velocloud_orchestrator
- canonical:ubuntu_linux
- debian:debian_linux
- linux:linux_kernel
- nixos:nixos
- opensuse:leap
- redhat:enterprise_linux
- redhat:enterprise_linux_aus
- redhat:enterprise_linux_eus
- redhat:enterprise_linux_tus
- redhat:enterprise_linux_update_services_for_sap_solutions
- redhat:openshift_container_platform
- siemens:simatic_ax_runtime
- siemens:simatic_cn_4100_firmware
- siemens:simatic_hmi_unified_comfort_panels_firmware
- siemens:simatic_iot2050_advanced_firmware
- siemens:simatic_ipc_ied-os
- siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware
- siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware
- siemens:simatic_s7-1500_tm_mfp_firmware
- siemens:siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware
- suse:basesystem_module
- suse:caas_platform
- suse:development_tools_module
- suse:enterprise_storage
- suse:legacy_module
- suse:linux_enterprise_desktop
- suse:linux_enterprise_high_availability_extension
- suse:linux_enterprise_high_performance_computing
- suse:linux_enterprise_live_patching
- suse:linux_enterprise_micro
- suse:linux_enterprise_real_time
- suse:linux_enterprise_server
- suse:linux_enterprise_workstation_extension
- suse:linux_micro
- suse:manager_proxy
- suse:manager_retail_branch_server
- suse:manager_server
- suse:openstack_cloud
- suse:openstack_cloud_crowbar
- suse:public_cloud_module
- suse:realtime_module
References
- https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c
- https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc
- https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667
- https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82
- https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b