CVE Tools
Home/Vulnerability/CVE-2026-31431

CVE-2026-31431

crypto: algif_aead - Revert to operating out-of-place

Published: Apr 22, 2026Updated: May 21, 2026 Sources: CVE List NVD csaf
NVD MITRE
7.8CVSS
HIGH

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

EPSS Score
2.2%
Top 15.3%
CISA KEV
Active Exploitation
Since May 1, 2026
Exploits
No Known Exploits
Remediation
Patch Available

CVSS Vector Breakdown

AV:LAC:LPR:LUI:NS:UC:HI:HA:H
Exploitability
AV:LAttack Vector
Local
AC:LAttack Complexity
Low
PR:LPrivileges Required
Low
UI:NUser Interaction
None
Scope
S:UScope
Unchanged
Impact
C:HConfidentiality
High
I:HIntegrity
High
A:HAvailability
High

Weaknesses

CWE-669

Affected Products

Linux
Linux
linux kernel
linux
openshift container platform
redhat
enterprise linux
redhat
amazon linux
amazon
and 35 more affected products View all →

Exploitability

CISA Known Exploited Vulnerability
Added to KEV:May 1, 2026
Remediation due:May 15, 2026

Required action: "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Official Patch Available

References

https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667
git.kernel.org
https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c
git.kernel.org
https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b
git.kernel.org
and 329 more references View all →

Timeline

Published
Apr 22, 2026
Added to CISA KEV
May 1, 2026
Last Updated
May 21, 2026
News mentions
4

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2026-31431 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
AI-powered analysis
Plain-language impact assessment and exploitation scenario
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows