CVE-2026-31431— crypto: algif_aead - Revert to operating out-of-place
Quick assessment
Affected
Linux Linux
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于algif_aead操作模式问题，可能导致安全风险。
Public Exploits 1
Metasploit · 1
cve_2026_31431_copy_fail.rb [exploit]
In-the-Wild Activity Observed
github_trending · high
cisa_kev · confirmed
Possible ATT&CK Techniques 1 AI
T1200 · Hardware AdditionsAffected Version Matrix 18
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 72548b093ee38a6d4f2a19e6ef1948ae05c181f7< 893d22e0135fa394db81df88697fba6032747667 |
affected |
72548b093ee38a6d4f2a19e6ef1948ae05c181f7< 19d43105a97be0810edbda875f2cd03f30dc130c |
affected | ||
72548b093ee38a6d4f2a19e6ef1948ae05c181f7< 961cfa271a918ad4ae452420e7c303149002875b |
affected | ||
72548b093ee38a6d4f2a19e6ef1948ae05c181f7< 3115af9644c342b356f3f07a4dd1c8905cd9a6fc |
affected | ||
72548b093ee38a6d4f2a19e6ef1948ae05c181f7< 8b88d99341f139e23bdeb1027a2a3ae10d341d82 |
affected | ||
72548b093ee38a6d4f2a19e6ef1948ae05c181f7< fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8 |
affected | ||
72548b093ee38a6d4f2a19e6ef1948ae05c181f7< ce42ee423e58dffa5ec03524054c9d8bfd4f6237 |
affected | ||
72548b093ee38a6d4f2a19e6ef1948ae05c181f7< a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5 |
affected | ||
| … +10 more rows | |||
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-31431
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
crypto: algif_aead - Revert to operating out-of-place
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于algif_aead操作模式问题，可能导致安全风险。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
II. Public POCs for CVE-2026-31431
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | None | https://github.com/Threekiii/Awesome-POC/blob/master/%E6%93%8D%E4%BD%9C%E7%B3%BB%E7%BB%9F%E6%BC%8F%E6%B4%9E/Linux%20Copy%20Fail%20%E6%9C%AC%E5%9C%B0%E6%8F%90%E6%9D%83%E6%BC%8F%E6%B4%9E%20CVE-2026-31431.md | POC Details |
| 2 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly. | https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-31431.yaml | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-31431
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-31431 (5)
Same Patch Batch · Linux · 2026-04-22 · 100 CVEs total
| CVE-2026-31444 | 9.8 CRITICAL | ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() |
| CVE-2026-31501 | 9.8 CRITICAL | net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path |
| CVE-2026-31463 | 9.8 CRITICAL | iomap: fix invalid folio access when i_blkbits differs from I/O granularity |
| CVE-2026-31478 | 9.8 CRITICAL | ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() |
| CVE-2026-31436 | 9.8 CRITICAL | dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() |
| CVE-2026-31448 | 9.4 CRITICAL | ext4: avoid infinite loops caused by residual data |
| CVE-2026-31450 | 8.8 HIGH | ext4: publish jinode after initialization |
| CVE-2026-31432 | 8.8 HIGH | ksmbd: fix OOB write in QUERY_INFO for compound requests |
| CVE-2026-31435 | 8.8 HIGH | netfs: Fix read abandonment during retry |
| CVE-2026-31433 | 8.8 HIGH | ksmbd: fix potencial OOB in get_file_all_info() for compound requests |
| CVE-2026-31476 | 8.2 HIGH | ksmbd: do not expire session on binding failure |
| CVE-2026-31464 | 8.1 HIGH | scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() |
| CVE-2026-31513 | 8.1 HIGH | Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req |
| CVE-2026-31454 | 7.8 HIGH | xfs: save ailp before dropping the AIL lock in push callbacks |
| CVE-2026-31479 | 7.8 HIGH | drm/xe: always keep track of remap prev/next |
| CVE-2026-31502 | 7.8 HIGH | team: fix header_ops type confusion with non-Ethernet ports |
| CVE-2026-31449 | 7.8 HIGH | ext4: validate p_idx bounds in ext4_ext_correct_indexes |
| CVE-2026-31504 | 7.8 HIGH | net: fix fanout UAF in packet_release() via NETDEV_UP race |
| CVE-2026-31505 | 7.8 HIGH | iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() |
| CVE-2026-31490 | 7.8 HIGH | drm/xe/pf: Fix use-after-free in migration restore |
Showing top 20 of 100 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
-
CVE-2026-98431
RDMA/uverbs: Fix mmap_lock/disassociation_lock circular depe -
CVE-2026-98430
RDMA/efa: Keep admin queues alive while IRQ is registered -
CVE-2026-98429
RDMA/efa: Keep EQ resources alive while IRQ is registered -
CVE-2026-98427
net/sched: codel: bound the dropping loop per dequeue call -
CVE-2026-98428
ALSA: usb: 6fire: Avoid embedded URBs
Same vendor: Linux
-
CVE-2026-98431
RDMA/uverbs: Fix mmap_lock/disassociation_lock circular depe -
CVE-2026-98430
RDMA/efa: Keep admin queues alive while IRQ is registered -
CVE-2026-98429
RDMA/efa: Keep EQ resources alive while IRQ is registered -
CVE-2026-98427
net/sched: codel: bound the dropping loop per dequeue call -
CVE-2026-98428
ALSA: usb: 6fire: Avoid embedded URBs
V. Comments for CVE-2026-31431
No comments yet