Back to the CVE list
CVE-2026-31431 CISA KEV · Actively exploited

crypto: algif_aead - Revert to operating out-of-place

CVSS score

7.8

EPSS probability

%3.4

Risk score

0.5

Published

5 mo ago

OverviewPublic Exploits (4)NewsroomVulnerability Timeline
Official patch verified

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2026-31431 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-31431 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1linuxLinux View
2linuxLinux View
3linuxlinux kernel View
4linuxlinux kernel View
5linuxlinux kernel View
6linuxlinux kernel View
7linuxlinux kernel View
8linuxlinux kernel View
9linuxlinux kernel View
10linuxlinux kernel View
11redhatopenshift container platform View
12redhatopenshift container platform View
13redhatopenshift container platform View
14redhatopenshift container platform View
15redhatopenshift container platform View
16redhatopenshift container platform View
17redhatopenshift container platform View
18redhatopenshift container platform View
19redhatopenshift container platform View
20redhatopenshift container platform View
21redhatopenshift container platform View
22redhatenterprise linux View
23redhatenterprise linux View
24redhatenterprise linux View
25redhatenterprise linux aus View
26redhatenterprise linux aus View
27redhatenterprise linux eus View
28redhatenterprise linux eus View
29redhatenterprise linux eus View
30redhatenterprise linux eus View
31redhatenterprise linux tus View
32redhatenterprise linux tus View
33redhatenterprise linux update services for sap solutions View
34redhatenterprise linux update services for sap solutions View
35redhatenterprise linux update services for sap solutions View
36redhatenterprise linux update services for sap solutions View
37amazonamazon linux View
38canonicalubuntu linux View
39debiandebian linux View
40debiandebian linux View
41debiandebian linux View
42opensuseleap View
43opensuseleap View
44opensuseleap View
45opensuseleap View
46susecaas platform View
47suseenterprise storage View
48suseenterprise storage View
49suseenterprise storage View
50susemanager proxy View
51susemanager proxy View
52susemanager proxy View
53susemanager proxy View
54susemanager retail branch server View
55susemanager retail branch server View
56susemanager retail branch server View
57susemanager retail branch server View
58susemanager server View
59susemanager server View
60susemanager server View
61susemanager server View
62suseopenstack cloud View
63suseopenstack cloud crowbar View
64susebasesystem module View
65susedevelopment tools module View
66suselegacy module View
67suselinux enterprise desktop View
68suselinux enterprise desktop View
69suselinux enterprise desktop View
70suselinux enterprise high availability extension View
71suselinux enterprise high availability extension View
72suselinux enterprise high performance computing View
73suselinux enterprise live patching View
74suselinux enterprise live patching View
75suselinux enterprise micro View
76suselinux enterprise micro View
77suselinux enterprise micro View
78suselinux enterprise micro View
79suselinux enterprise micro View
80suselinux enterprise micro View
81suselinux enterprise real time View
82suselinux enterprise server View
83suselinux enterprise server View
84suselinux enterprise server View
85suselinux enterprise server View
86suselinux enterprise server View
87suselinux enterprise workstation extension View
88suselinux micro View
89suselinux micro View
90suselinux micro View
91susepublic cloud module View
92suserealtime module View
93nixosnixos View
94aristacloudvision agni View
95aristacloudvision portal View
96aristavelocloud edge View
97aristavelocloud gateway View
98aristavelocloud orchestrator View
99aristanetvisor os View
100aristanetvisor os View
101siemenssimatic s7-1500 cpu 1518-4 pn/dp mfp firmware View
102siemenssimatic s7-1500 cpu 1518-4 pn/dp mfp View
103siemenssimatic s7-1500 cpu 1518f-4 pn/dp mfp firmware View
104siemenssimatic s7-1500 cpu 1518f-4 pn/dp mfp View
105siemenssiplus s7-1500 cpu 1518-4 pn/dp mfp firmware View
106siemenssiplus s7-1500 cpu 1518-4 pn/dp mfp View
107siemenssimatic s7-1500 tm mfp firmware View
108siemenssimatic s7-1500 tm mfp View
109canonicalubuntu linux View
110canonicalubuntu linux View
111canonicalubuntu linux View
112canonicalubuntu linux View
113canonicalubuntu linux View
114canonicalubuntu linux View
115canonicalubuntu linux View
116siemenssimatic cn 4100 firmware View
117siemenssimatic cn 4100 View
118siemenssimatic ax runtime View
119siemenssimatic hmi unified comfort panels firmware View
120siemenssimatic hmi unified comfort panels firmware View
121siemenssimatic hmi mtp1000 View
122siemenssimatic hmi mtp1200 View
123siemenssimatic hmi mtp1500 View
124siemenssimatic hmi mtp1900 View
125siemenssimatic hmi mtp2200 View
126siemenssimatic hmi mtp700 View
127siemenssimatic iot2050 advanced firmware View
128siemensSIMATIC IoT2050 Advanced View
129siemenssimatic ipc ied-os View
130linuxKernel View
Total affected vendors: 10|Products: 130

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.8CVSS V31HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD
7.8CVSS V3_1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE CNA
7.8CVSS V3_1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE ADP
7.8CVSS 3.x—CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HMicrosoft MSRC
5.5CVSS 3.x—CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HMicrosoft MSRC

Patch and Remediation Guide

Solution & Remediation Advisory

Patch verified

31 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Open source
Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

CVE-2026-31431 : the database holds 4 public PoC/exploit sources for it. For direct links to the sources, open the Public Exploits tab.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-31431 is associated with the following CWEs:

CWE-669: Common Weakness Enumeration Entry CWE-669CWE-1288: Common Weakness Enumeration Entry CWE-1288

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-31431 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667vendor-advisoryhttps://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130cvendor-advisoryhttps://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875bvendor-advisoryhttps://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fcvendor-advisoryhttps://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82vendor-advisoryhttps://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8vendor-advisoryhttps://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237vendor-advisoryhttps://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5vendor-advisoryhttp://www.openwall.com/lists/oss-security/2026/04/29/23patchhttp://www.openwall.com/lists/oss-security/2026/04/29/25patch

CVSS Vector Radar Chart

7.8 / 10
Attack VectorLocalComplexityLowPrivilegesLowUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama doğrulandı

31 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Follow the vendor

L
linux logo
linux
R
redhat logo
redhat
A
amazon logo
amazon
C
canonical logo
canonical
D
debian logo
debian
O
opensuse logo
opensuse

Weakness Type (CWE & CAPEC)

CWE-669 CWE-1288

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-31431"