CVE-2026-31431
high CISA KEVLinux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
Vendor / product: Linux — Kernel
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
CVSS
7.8
7.8 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Severity source: NVD CVSS v3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
Timeline (UTC)
Published: 2026-04-22 09:16
Modified: 2026-09-08 15:13
NVD status: Analyzed
Last synced 1 day ago
Verified against the source API 2026-10-27 07:07 UTC
Exploitation
Listed in CISA KEV
Added 2026-05-01 · due 2026-05-15
Known ransomware use: Unknown
Required action (CISA)
"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Affected products
linux / linux_kernel ≥4.14 <5.10.254, ≥5.11 <5.15.204, ≥5.16 <6.1.170, ≥6.2 <6.6.137, ≥6.7 <6.12.85, ≥6.13 <6.18.22
redhat / openshift_container_platform ≥4.12 <4.12.89, ≥4.13 <4.13.66, ≥4.14 <4.14.65, ≥4.15 <4.15.64, ≥4.16 <4.16.61, ≥4.17 <4.17.53
redhat / enterprise_linux 8.0, 9.0, 10.0
redhat / enterprise_linux_aus 8.4, 8.6
redhat / enterprise_linux_eus 8.4, 9.4, 9.6, 10.0
redhat / enterprise_linux_tus 8.6, 8.8
redhat / enterprise_linux_update_services_for_sap_solutions 8.6, 8.8, 9.0, 9.2
amazon / amazon_linux all versions
canonical / ubuntu_linux all versions, 14.04, 16.04, 18.04, 20.04, 22.04
debian / debian_linux 11.0, 12.0, 13.0
opensuse / leap 15.3, 15.4, 15.5, 15.6
suse / caas_platform 4.0
suse / enterprise_storage 6.0, 7.0, 7.1
suse / manager_proxy 4.0, 4.1, 4.2, 4.3
suse / manager_retail_branch_server 4.0, 4.1, 4.2, 4.3
suse / manager_server 4.0, 4.1, 4.2, 4.3
suse / openstack_cloud 9.0
suse / openstack_cloud_crowbar 9.0
suse / basesystem_module 15
suse / development_tools_module 15
suse / legacy_module 15
suse / linux_enterprise_desktop 11, 12, 15
suse / linux_enterprise_high_availability_extension 15, 16.0
suse / linux_enterprise_high_performance_computing 15.0
suse / linux_enterprise_live_patching 12, 15
suse / linux_enterprise_micro 5.0, 5.1, 5.2, 5.3, 5.4, 5.5
suse / linux_enterprise_real_time 15.0
suse / linux_enterprise_server 11, 12, 15, 16.0, 16.1
suse / linux_enterprise_workstation_extension 15
suse / linux_micro 6.0, 6.1, 6.2
suse / public_cloud_module 15
suse / realtime_module 15
nixos / nixos <25.11
arista / cloudvision_agni ≥2024.4.0 ≤2025.2.2
arista / cloudvision_portal ≥2024.2.0 ≤2026.1.0
arista / velocloud_edge ≥4.5.0 ≤6.4.1
arista / velocloud_gateway all versions
arista / velocloud_orchestrator all versions
arista / netvisor_os <7.1.0, 7.1.0
siemens / simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware ≥3.1.5
siemens / simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware ≥3.1.5
siemens / siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware ≥3.1.5
siemens / simatic_s7-1500_tm_mfp_firmware all versions
siemens / simatic_cn_4100_firmware <6.0
siemens / simatic_ax_runtime all versions
siemens / simatic_hmi_unified_comfort_panels_firmware <21.0, 21.0
siemens / simatic_iot2050_advanced_firmware all versions
siemens / simatic_ipc_ied-os all versions
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Patch / mitigation: https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c
Patch / mitigation: https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc
Patch / mitigation: https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667
Patch / mitigation: https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82
Patch / mitigation: https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b
Patch / mitigation: https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5
Patch / mitigation: https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237
Patch / mitigation: https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8
Patch / mitigation: http://www.openwall.com/lists/oss-security/2026/04/29/23
Patch / mitigation: http://www.openwall.com/lists/oss-security/2026/04/29/25
References
- https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- http://www.openwall.com/lists/oss-security/2026/04/29/23 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/04/29/25 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/04/29/26 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/04/30/10 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/04/30/11 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/04/30/12 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/04/30/14 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/04/30/15 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/04/30/16 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/04/30/17 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/04/30/18 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/04/30/2 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/04/30/20 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/04/30/5 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/04/30/6 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/05/01/10 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2026/05/01/12 af854a3a-2127-422b-91ae-364da2661108
Data sources
CISA KEV — fetched 2026-10-27 06:50 UTC · record ↗
NVD CVE API 2.0 — fetched 2026-10-27 07:07 UTC · record ↗