CVE-2026-31431

crypto: algif_aead - Revert to operating out-of-place

High 7.8
Exploited: added to CISA KEV 1 May 2026

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Key facts

Published: 22 Apr 2026
Last changed: 15 Oct 2026
Assigned by: Linux
KEV added: 1 May 2026
KEV fix due: 15 May 2026
EPSS: 98.114% likely to be exploited in the next 30 days, higher than 99.912% of CVEs (scores for 15 Nov 2026)
SSVC (CISA): Exploitation: active; Automatable: no; Technical impact: total

Severity scores

Each score is shown as its source gave it. They are not averaged or merged.

7.8CVSS 3.1, Highfrom the CNA (Linux)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8CVSS 3.1, Highfrom redhat-SADP (ADP container)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What to do

"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.CISA KEV required action

Historical context and remediation

This reference retains the original CVE publication date. A recent record update does not mean a new attack occurred.

No separately sourced impact summary is available on this page yet. Consult the description, version data and dated exploitation evidence.

Version statuses below come from the CNA. An “unaffected” version is not necessarily a currently supported release or proof of a patch date. EPSS is a dated risk estimate, not a count of historical attacks.

Read the original CVE record.

Affected products

Vendor	Product	Versions
Linux	Linux	Default status: unaffected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 up to but excluding 893d22e0135fa394db81df88697fba6032747667 (affected) 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 up to but excluding 19d43105a97be0810edbda875f2cd03f30dc130c (affected) 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 up to but excluding 961cfa271a918ad4ae452420e7c303149002875b (affected) 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 up to but excluding 3115af9644c342b356f3f07a4dd1c8905cd9a6fc (affected) 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 up to but excluding 8b88d99341f139e23bdeb1027a2a3ae10d341d82 (affected) 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 up to but excluding fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8 (affected) 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 up to but excluding ce42ee423e58dffa5ec03524054c9d8bfd4f6237 (affected) 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 up to but excluding a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5 (affected)
Linux	Linux	Default status: affected 4.14 (affected) 0 up to but excluding 4.14 (unaffected) 5.10.254 up to and including 5.10.* (unaffected) 5.15.204 up to and including 5.15.* (unaffected) 6.1.170 up to and including 6.1.* (unaffected) 6.6.137 up to and including 6.6.* (unaffected) 6.12.85 up to and including 6.12.* (unaffected) 6.18.22 up to and including 6.18.* (unaffected) 6.19.12 up to and including 6.19.* (unaffected) 7.0 up to and including * (unaffected)