Vulnerability Intelligence Report
crypto: algif_aead - Revert to operating out-of-place
CVE-2026-31431
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
CISA KEV
Nuclei Template
SSVC: Active Exploitation
CVSS Base Score
7.8
HIGH
Exploitability:1.9
Impact Score:5.9
EPSS Probability:99.91%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-669 ↗CWE-669 Incorrect Resource Transfer Between Spheres
CWE-1288 ↗Improper Validation of Consistency within Input
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Linux | Linux | 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 < 893d22e0135fa394db81df88697fba6032747667 (affected), 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 < 19d43105a97be0810edbda875f2cd03f30dc130c (affected), 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 < 961cfa271a918ad4ae452420e7c303149002875b (affected), 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 < 3115af9644c342b356f3f07a4dd1c8905cd9a6fc (affected), 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 < 8b88d99341f139e23bdeb1027a2a3ae10d341d82 (affected), 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 < fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8 (affected), 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 < ce42ee423e58dffa5ec03524054c9d8bfd4f6237 (affected), 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 < a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5 (affected) |
| Linux | Linux | 4.14 (affected), 0 < 4.14 (unaffected), 5.10.254 <= 5.10.* (unaffected), 5.15.204 <= 5.15.* (unaffected), 6.1.170 <= 6.1.* (unaffected), 6.6.137 <= 6.6.* (unaffected), 6.12.85 <= 6.12.* (unaffected), 6.18.22 <= 6.18.* (unaffected), 6.19.12 <= 6.19.* (unaffected), 7.0 <= * (unaffected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
CISA KEV
ACTIVE IN CATALOG
Nuclei Template
SCANNER AVAILABLE
EPSS Score
99.907%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | kernel.org · Vendor · USA |
| Reserved | 2026-03-09T15:48:24 |
| Published | 2026-04-22T08:15:10 |
| Last Updated | 2026-09-08T08:47:06 |
Community Chatter & Buzz