{"cve_id":"CVE-2026-31431","published":"2026-04-22T09:16:21.270000+00:00","last_modified":"2026-09-08T15:13:07.273000+00:00","vuln_status":"Analyzed","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - Revert to operating out-of-place\n\nThis mostly reverts commit 72548b093ee3 except for the copying of\nthe associated data.\n\nThere is no benefit in operating in-place in algif_aead since the\nsource and destination come from different mappings.  Get rid of\nall the complexity added for in-place operation and just copy the\nAD directly.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","base_score":7.8,"base_severity":"HIGH","attack_vector":"LOCAL","privileges_req":"LOW","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"HIGH","impact_i":"HIGH","impact_a":"HIGH","cwe_ids":["CWE-669","CWE-1288"],"in_kev":true,"kev_date_added":"2026-05-01","kev_ransomware":false,"epss_score":0.98114,"epss_percentile":0.99912,"cap_rule_version":"0.1.1","stage":"EXECUTION","req_access":"USER","req_vector":"LOCAL","req_user_interaction":false,"grant_access":"USER","caps":["CODE_EXEC"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T12:07:24.008896+00:00","first_seen":"2026-04-22T09:16:21.270000+00:00","kev_first_seen":"2026-05-01T00:00:00+00:00","novelty_score":61.46,"novelty_reasons":["EPSS_SPIKE","HIGH_LEVERAGE_STEPPING_STONE","REACHES_TERMINAL","RAISES_REACH_COMMON_PRODUCT"],"novelty_at":"2026-11-02T03:21:44.260683+00:00","vendors":["amazon","arista","canonical","debian","linux","nixos","opensuse","redhat","siemens","suse"],"products":["amazon_linux","basesystem_module","caas_platform","cloudvision_agni","cloudvision_portal","debian_linux","development_tools_module","enterprise_linux","enterprise_linux_aus","enterprise_linux_eus","enterprise_linux_tus","enterprise_linux_update_services_for_sap_solutions","enterprise_storage","leap","legacy_module","linux_enterprise_desktop","linux_enterprise_high_availability_extension","linux_enterprise_high_performance_computing","linux_enterprise_live_patching","linux_enterprise_micro","linux_enterprise_real_time","linux_enterprise_server","linux_enterprise_workstation_extension","linux_kernel","linux_micro","manager_proxy","manager_retail_branch_server","manager_server","netvisor_os","nixos","openshift_container_platform","openstack_cloud","openstack_cloud_crowbar","public_cloud_module","realtime_module","simatic_ax_runtime","simatic_cn_4100","simatic_cn_4100_firmware","simatic_hmi_mtp1000","simatic_hmi_mtp1200","simatic_hmi_mtp1500","simatic_hmi_mtp1900","simatic_hmi_mtp2200","simatic_hmi_mtp700","simatic_hmi_unified_comfort_panels_firmware","simatic_iot2050_advanced","simatic_iot2050_advanced_firmware","simatic_ipc_ied-os","simatic_s7-1500_cpu_1518-4_pn\\/dp_mfp","simatic_s7-1500_cpu_1518-4_pn\\/dp_mfp_firmware","simatic_s7-1500_cpu_1518f-4_pn\\/dp_mfp","simatic_s7-1500_cpu_1518f-4_pn\\/dp_mfp_firmware","simatic_s7-1500_tm_mfp","simatic_s7-1500_tm_mfp_firmware","siplus_s7-1500_cpu_1518-4_pn\\/dp_mfp","siplus_s7-1500_cpu_1518-4_pn\\/dp_mfp_firmware","ubuntu_linux","velocloud_edge","velocloud_gateway","velocloud_orchestrator"],"affected":[{"vendor":"amazon","product":"amazon_linux","ranges":["all versions"]},{"vendor":"arista","product":"cloudvision_agni","ranges":["≥ 2024.4.0 and ≤ 2025.2.2"]},{"vendor":"arista","product":"cloudvision_portal","ranges":["≥ 2024.2.0 and ≤ 2026.1.0"]},{"vendor":"arista","product":"netvisor_os","ranges":["7.1.0","< 7.1.0"]},{"vendor":"arista","product":"velocloud_edge","ranges":["≥ 4.5.0 and ≤ 6.4.1"]},{"vendor":"arista","product":"velocloud_gateway","ranges":["all versions"]},{"vendor":"arista","product":"velocloud_orchestrator","ranges":["all versions"]},{"vendor":"canonical","product":"ubuntu_linux","ranges":["24.04","all versions","25.10","22.04","20.04","18.04","16.04","14.04"]},{"vendor":"debian","product":"debian_linux","ranges":["12.0","13.0","11.0"]},{"vendor":"linux","product":"linux_kernel","ranges":["≥ 5.16 and < 6.1.170","≥ 6.7 and < 6.12.85","≥ 6.13 and < 6.18.22","≥ 6.19 and < 6.19.12","7.0","≥ 4.14 and < 5.10.254","≥ 5.11 and < 5.15.204","≥ 6.2 and < 6.6.137"]},{"vendor":"nixos","product":"nixos","ranges":["< 25.11"]},{"vendor":"opensuse","product":"leap","ranges":["15.6","15.3","15.4","15.5"]},{"vendor":"redhat","product":"enterprise_linux","ranges":["8.0","10.0","9.0"]},{"vendor":"redhat","product":"enterprise_linux_aus","ranges":["8.6","8.4"]},{"vendor":"redhat","product":"enterprise_linux_eus","ranges":["9.6","9.4","10.0","8.4"]},{"vendor":"redhat","product":"enterprise_linux_tus","ranges":["8.8","8.6"]},{"vendor":"redhat","product":"enterprise_linux_update_services_for_sap_solutions","ranges":["8.6","8.8","9.0","9.2"]},{"vendor":"redhat","product":"openshift_container_platform","ranges":["≥ 4.21 and < 4.21.14","≥ 4.20 and < 4.20.21","≥ 4.19 and < 4.19.30","4.0","≥ 4.18 and < 4.18.40","≥ 4.17 and < 4.17.53","≥ 4.16 and < 4.16.61","≥ 4.15 and < 4.15.64","≥ 4.14 and < 4.14.65","≥ 4.13 and < 4.13.66","≥ 4.12 and < 4.12.89"]},{"vendor":"siemens","product":"simatic_ax_runtime","ranges":["all versions"]},{"vendor":"siemens","product":"simatic_cn_4100_firmware","ranges":["< 6.0"]},{"vendor":"siemens","product":"simatic_hmi_unified_comfort_panels_firmware","ranges":["< 21.0","21.0"]},{"vendor":"siemens","product":"simatic_iot2050_advanced_firmware","ranges":["all versions"]},{"vendor":"siemens","product":"simatic_ipc_ied-os","ranges":["all versions"]},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1518-4_pn\\/dp_mfp_firmware","ranges":["≥ 3.1.5"]},{"vendor":"siemens","product":"simatic_s7-1500_cpu_1518f-4_pn\\/dp_mfp_firmware","ranges":["≥ 3.1.5"]},{"vendor":"siemens","product":"simatic_s7-1500_tm_mfp_firmware","ranges":["all versions"]},{"vendor":"siemens","product":"siplus_s7-1500_cpu_1518-4_pn\\/dp_mfp_firmware","ranges":["≥ 3.1.5"]},{"vendor":"suse","product":"basesystem_module","ranges":["15"]},{"vendor":"suse","product":"caas_platform","ranges":["4.0"]},{"vendor":"suse","product":"development_tools_module","ranges":["15"]},{"vendor":"suse","product":"enterprise_storage","ranges":["7.1","7.0","6.0"]},{"vendor":"suse","product":"legacy_module","ranges":["15"]},{"vendor":"suse","product":"linux_enterprise_desktop","ranges":["11","12","15"]},{"vendor":"suse","product":"linux_enterprise_high_availability_extension","ranges":["16.0","15"]},{"vendor":"suse","product":"linux_enterprise_high_performance_computing","ranges":["15.0"]},{"vendor":"suse","product":"linux_enterprise_live_patching","ranges":["15","12"]},{"vendor":"suse","product":"linux_enterprise_micro","ranges":["5.5","5.0","5.1","5.2","5.3","5.4"]},{"vendor":"suse","product":"linux_enterprise_real_time","ranges":["15.0"]},{"vendor":"suse","product":"linux_enterprise_server","ranges":["11","16.1","16.0","15","12"]},{"vendor":"suse","product":"linux_enterprise_workstation_extension","ranges":["15"]},{"vendor":"suse","product":"linux_micro","ranges":["6.2","6.1","6.0"]},{"vendor":"suse","product":"manager_proxy","ranges":["4.3","4.1","4.0","4.2"]},{"vendor":"suse","product":"manager_retail_branch_server","ranges":["4.0","4.3","4.2","4.1"]},{"vendor":"suse","product":"manager_server","ranges":["4.0","4.3","4.2","4.1"]},{"vendor":"suse","product":"openstack_cloud","ranges":["9.0"]},{"vendor":"suse","product":"openstack_cloud_crowbar","ranges":["9.0"]},{"vendor":"suse","product":"public_cloud_module","ranges":["15"]},{"vendor":"suse","product":"realtime_module","ranges":["15"]}]}