Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-31431

crypto: algif_aead - Revert to operating out-of-place

Published
Last modified
published
Listed in CISA KEV
Fix
Fixed in 5.10.254, 5.15.204, 6.1.170, 6.6.137, 6.12.85, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: active
  • Automatable: no
  • Technical impact: total

Summary

The Linux kernel's AF_ALG user-space cryptography interface, specifically its AEAD (authenticated encryption) socket implementation in the algif_aead module, is affected. The flaw was introduced by an earlier in-place operation change, and the fix reverts that approach, which addresses incorrect handling of memory operations and could lead to memory corruption or unintended data behavior in affected systems.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Read the original description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: active · Automatable: no · Technical impact: total

  3. Added to CISA KEV

    CISA has evidence of exploitation in the wild

  4. CISA remediation deadline

    Due date for US federal agencies to patch

  5. Record last updated
  6. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • Linux Linux

    From 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 · fixed in 893d22e0135fa394db81df88697fba6032747667; From 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 · fixed in 19d43105a97be0810edbda875f2cd03f30dc130c; From 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 · fixed in 961cfa271a918ad4ae452420e7c303149002875b; From 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 · fixed in 3115af9644c342b356f3f07a4dd1c8905cd9a6fc; From 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 · fixed in 8b88d99341f139e23bdeb1027a2a3ae10d341d82; From 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 · fixed in fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8; From 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 · fixed in ce42ee423e58dffa5ec03524054c9d8bfd4f6237; From 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 · fixed in a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5

  • Linux Linux

    4.14

  • KernelLinux

    From 4.14.0 · fixed in 5.10.254; From 5.11.0 · fixed in 5.15.204; From 5.16.0 · fixed in 6.1.170; From 6.2.0 · fixed in 6.6.137; From 6.7.0 · fixed in 6.12.85; From 6.13.0 · fixed in 6.18.22; From 6.19.0 · fixed in 6.19.12

References 8

git.kernel.org