CVE-2026-31431

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Affected products

Linuxmint, Linux Kernel, Red Os, Rocky Linux, Ubuntu

Linux Linux Kernel

< 5.10.254, 5.15.204, 6.1.170, 6.6.137, 6.12.85, 6.18.22, 6.19.12, 7.0

Fix

Available

CVSS 3.1

7.8 HIGH

EPSS

99.9% (100th percentile)

Weakness

CWE-669, CWE-1288

NVD status

Analyzed

Published

2026-04-22