CVE-2026-31431

Published: Apr 22, 2026Modified: Sep 8, 2026CISA KEV

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Affected (207)

Products: Linux: Linux Kernel · Redhat: Enterprise Linux, Enterprise Linux Aus, Enterprise Linux Eus, Enterprise Linux Tus, Enterprise Linux Update Services For Sap Solutions, Openshift Container Platform · Amazon: Amazon Linux · +7 more

Show all products

Linux: Linux Kernel · Redhat: Enterprise Linux, Enterprise Linux Aus, Enterprise Linux Eus, Enterprise Linux Tus, Enterprise Linux Update Services For Sap Solutions, Openshift Container Platform · Amazon: Amazon Linux · Canonical: Ubuntu Linux · Debian: Debian Linux · Opensuse: Leap · Suse: Caas Platform, Enterprise Storage, Manager Proxy, Manager Retail Branch Server, Manager Server, Openstack Cloud, Openstack Cloud Crowbar, Basesystem Module, Development Tools Module, Legacy Module, Linux Enterprise Desktop, Linux Enterprise High Availability Extension, Linux Enterprise High Performance Computing, Linux Enterprise Live Patching, Linux Enterprise Micro, Linux Enterprise Real Time, Linux Enterprise Server, Linux Enterprise Workstation Extension, Linux Micro, Public Cloud Module, Realtime Module · Nixos: Nixos · Arista: Cloudvision Agni, Cloudvision Portal, Netvisor Os, Velocloud Edge, Velocloud Gateway, Velocloud Orchestrator · Siemens: Simatic S7 1500 Cpu 1518 4 Pn/dp Mfp Firmware, Simatic S7 1500 Cpu 1518f 4 Pn/dp Mfp Firmware, Siplus S7 1500 Cpu 1518 4 Pn/dp Mfp Firmware, Simatic S7 1500 Tm Mfp Firmware, Simatic Cn 4100 Firmware, Simatic Ax Runtime, Simatic Hmi Unified Comfort Panels Firmware, Simatic Iot2050 Advanced Firmware, Simatic Ipc Ied Os

1 product

6 products

Enterprise Linux Update Services For Sap Solutions

Openshift Container Platform

1 product

1 product

1 product

1 product

21 products

Manager Retail Branch Server

Manager Server

Openstack Cloud

Openstack Cloud Crowbar

Basesystem Module

Development Tools Module

Legacy Module

Linux Enterprise Desktop

Linux Enterprise High Availability Extension

Linux Enterprise High Performance Computing

Linux Enterprise Live Patching

Linux Enterprise Micro

Linux Enterprise Real Time

Linux Enterprise Server

Linux Enterprise Workstation Extension

1 product

6 products

Velocloud Orchestrator

Siemens

9 products

Simatic S7 1500 Cpu 1518 4 Pn/dp Mfp Firmware

Simatic S7 1500 Cpu 1518f 4 Pn/dp Mfp Firmware

Siplus S7 1500 Cpu 1518 4 Pn/dp Mfp Firmware

Simatic S7 1500 Tm Mfp Firmware

Simatic Cn 4100 Firmware

Simatic Ax Runtime

Simatic Hmi Unified Comfort Panels Firmware

Simatic Iot2050 Advanced Firmware

Simatic Ipc Ied Os

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	4.14 ≤ version < 5.10.254
Linux Linux Kernel	5.11 ≤ version < 5.15.204
Linux Linux Kernel	5.16 ≤ version < 6.1.170
Linux Linux Kernel	6.13 ≤ version < 6.18.22
Linux Linux Kernel	6.19 ≤ version < 6.19.12
Linux Linux Kernel	6.2 ≤ version < 6.6.137
Linux Linux Kernel	6.7 ≤ version < 6.12.85
Linux Linux Kernel	Version 7.0 rc1
Linux Linux Kernel	Version 7.0 rc2
Linux Linux Kernel	Version 7.0 rc3
Linux Linux Kernel	Version 7.0 rc4
Linux Linux Kernel	Version 7.0 rc5
Linux Linux Kernel	Version 7.0 rc6

Configuration B

26 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 10.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0
Redhat Enterprise Linux Aus	Version 8.4
Redhat Enterprise Linux Aus	Version 8.6
Redhat Enterprise Linux Eus	Version 10.0
Redhat Enterprise Linux Eus	Version 8.4
Redhat Enterprise Linux Eus	Version 9.4
Redhat Enterprise Linux Eus	Version 9.6
Redhat Enterprise Linux Tus	Version 8.6
Redhat Enterprise Linux Tus	Version 8.8
Redhat Enterprise Linux Update Services For Sap Solutions	Version 8.6
Redhat Enterprise Linux Update Services For Sap Solutions	Version 8.8
Redhat Enterprise Linux Update Services For Sap Solutions	Version 9.0
Redhat Enterprise Linux Update Services For Sap Solutions	Version 9.2
Redhat Openshift Container Platform	4.12 ≤ version < 4.12.89
Redhat Openshift Container Platform	4.13 ≤ version < 4.13.66
Redhat Openshift Container Platform	4.14 ≤ version < 4.14.65
Redhat Openshift Container Platform	4.15 ≤ version < 4.15.64
Redhat Openshift Container Platform	4.16 ≤ version < 4.16.61
Redhat Openshift Container Platform	4.17 ≤ version < 4.17.53
Redhat Openshift Container Platform	4.18 ≤ version < 4.18.40
Redhat Openshift Container Platform	4.19 ≤ version < 4.19.30
Redhat Openshift Container Platform	4.20 ≤ version < 4.20.21
Redhat Openshift Container Platform	4.21 ≤ version < 4.21.14
Redhat Openshift Container Platform	Version 4.0

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Amazon Amazon Linux	All versions
Canonical Ubuntu Linux	All versions
Debian Debian Linux	Version 11.0
Debian Debian Linux	Version 12.0
Debian Debian Linux	Version 13.0

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.3
Opensuse Leap	Version 15.4
Opensuse Leap	Version 15.5
Opensuse Leap	Version 15.6

Configuration E

18 vulnerable

Vulnerable Software	Affected Versions
Suse Caas Platform	Version 4.0
Suse Enterprise Storage	Version 6.0
Suse Enterprise Storage	Version 7.0
Suse Enterprise Storage	Version 7.1
Suse Manager Proxy	Version 4.0
Suse Manager Proxy	Version 4.1
Suse Manager Proxy	Version 4.2
Suse Manager Proxy	Version 4.3
Suse Manager Retail Branch Server	Version 4.0
Suse Manager Retail Branch Server	Version 4.1
Suse Manager Retail Branch Server	Version 4.2
Suse Manager Retail Branch Server	Version 4.3
Suse Manager Server	Version 4.0
Suse Manager Server	Version 4.1
Suse Manager Server	Version 4.2
Suse Manager Server	Version 4.3
Suse Openstack Cloud	Version 9.0
Suse Openstack Cloud Crowbar	Version 9.0

Configuration F

113 vulnerable

Vulnerable Software	Affected Versions
Suse Basesystem Module	Version 15 sp1
Suse Basesystem Module	Version 15 sp2
Suse Basesystem Module	Version 15 sp3
Suse Basesystem Module	Version 15 sp4
Suse Basesystem Module	Version 15 sp5
Suse Basesystem Module	Version 15 sp6
Suse Basesystem Module	Version 15 sp7
Suse Development Tools Module	Version 15 sp1
Suse Development Tools Module	Version 15 sp2
Suse Development Tools Module	Version 15 sp3
Suse Development Tools Module	Version 15 sp4
Suse Development Tools Module	Version 15 sp5
Suse Development Tools Module	Version 15 sp6
Suse Development Tools Module	Version 15 sp7
Suse Legacy Module	Version 15 sp7
Suse Linux Enterprise Desktop	Version 11 sp4
Suse Linux Enterprise Desktop	Version 12 sp4
Suse Linux Enterprise Desktop	Version 15 sp1
Suse Linux Enterprise Desktop	Version 15 sp2
Suse Linux Enterprise Desktop	Version 15 sp3
Suse Linux Enterprise Desktop	Version 15 sp4
Suse Linux Enterprise Desktop	Version 15 sp5
Suse Linux Enterprise Desktop	Version 15 sp6
Suse Linux Enterprise Desktop	Version 15 sp7
Suse Linux Enterprise High Availability Extension	Version 15 sp4
Suse Linux Enterprise High Availability Extension	Version 15 sp6
Suse Linux Enterprise High Availability Extension	Version 15 sp7
Suse Linux Enterprise High Availability Extension	Version 16.0
Suse Linux Enterprise High Performance Computing	Version 15.0 sp1
Suse Linux Enterprise High Performance Computing	Version 15.0 sp1
Suse Linux Enterprise High Performance Computing	Version 15.0 sp1
Suse Linux Enterprise High Performance Computing	Version 15.0 sp2
Suse Linux Enterprise High Performance Computing	Version 15.0 sp2
Suse Linux Enterprise High Performance Computing	Version 15.0 sp2
Suse Linux Enterprise High Performance Computing	Version 15.0 sp3
Suse Linux Enterprise High Performance Computing	Version 15.0 sp3
Suse Linux Enterprise High Performance Computing	Version 15.0 sp3
Suse Linux Enterprise High Performance Computing	Version 15.0 sp4
Suse Linux Enterprise High Performance Computing	Version 15.0 sp4
Suse Linux Enterprise High Performance Computing	Version 15.0 sp4
Suse Linux Enterprise High Performance Computing	Version 15.0 sp5
Suse Linux Enterprise High Performance Computing	Version 15.0 sp5
Suse Linux Enterprise High Performance Computing	Version 15.0 sp5
Suse Linux Enterprise High Performance Computing	Version 15.0 sp6
Suse Linux Enterprise High Performance Computing	Version 15.0 sp7
Suse Linux Enterprise Live Patching	Version 12 sp5
Suse Linux Enterprise Live Patching	Version 15 sp4
Suse Linux Enterprise Live Patching	Version 15 sp5
Suse Linux Enterprise Live Patching	Version 15 sp6
Suse Linux Enterprise Live Patching	Version 15 sp7
Suse Linux Enterprise Micro	Version 5.0
Suse Linux Enterprise Micro	Version 5.1
Suse Linux Enterprise Micro	Version 5.2
Suse Linux Enterprise Micro	Version 5.2
Suse Linux Enterprise Micro	Version 5.3
Suse Linux Enterprise Micro	Version 5.3
Suse Linux Enterprise Micro	Version 5.4
Suse Linux Enterprise Micro	Version 5.4
Suse Linux Enterprise Micro	Version 5.5
Suse Linux Enterprise Real Time	Version 15.0 sp2
Suse Linux Enterprise Real Time	Version 15.0 sp3
Suse Linux Enterprise Real Time	Version 15.0 sp4
Suse Linux Enterprise Real Time	Version 15.0 sp5
Suse Linux Enterprise Real Time	Version 15.0 sp6
Suse Linux Enterprise Real Time	Version 15.0 sp7
Suse Linux Enterprise Server	Version 11 sp4
Suse Linux Enterprise Server	Version 11 sp4
Suse Linux Enterprise Server	Version 11 sp4
Suse Linux Enterprise Server	Version 12 sp4
Suse Linux Enterprise Server	Version 12 sp4
Suse Linux Enterprise Server	Version 12 sp4
Suse Linux Enterprise Server	Version 12 sp4
Suse Linux Enterprise Server	Version 12 sp5
Suse Linux Enterprise Server	Version 12 sp5
Suse Linux Enterprise Server	Version 12 sp5
Suse Linux Enterprise Server	Version 15 sp1
Suse Linux Enterprise Server	Version 15 sp1
Suse Linux Enterprise Server	Version 15 sp1
Suse Linux Enterprise Server	Version 15 sp1
Suse Linux Enterprise Server	Version 15 sp2
Suse Linux Enterprise Server	Version 15 sp2
Suse Linux Enterprise Server	Version 15 sp2
Suse Linux Enterprise Server	Version 15 sp2
Suse Linux Enterprise Server	Version 15 sp3
Suse Linux Enterprise Server	Version 15 sp3
Suse Linux Enterprise Server	Version 15 sp3
Suse Linux Enterprise Server	Version 15 sp3
Suse Linux Enterprise Server	Version 15 sp4
Suse Linux Enterprise Server	Version 15 sp4
Suse Linux Enterprise Server	Version 15 sp4
Suse Linux Enterprise Server	Version 15 sp5
Suse Linux Enterprise Server	Version 15 sp5
Suse Linux Enterprise Server	Version 15 sp5
Suse Linux Enterprise Server	Version 15 sp6
Suse Linux Enterprise Server	Version 15 sp6
Suse Linux Enterprise Server	Version 15 sp6
Suse Linux Enterprise Server	Version 15 sp7
Suse Linux Enterprise Server	Version 15 sp7
Suse Linux Enterprise Server	Version 16.0
Suse Linux Enterprise Server	Version 16.0
Suse Linux Enterprise Server	Version 16.1
Suse Linux Enterprise Server	Version 16.1
Suse Linux Enterprise Workstation Extension	Version 15 sp7
Suse Linux Micro	Version 6.0
Suse Linux Micro	Version 6.1
Suse Linux Micro	Version 6.2
Suse Public Cloud Module	Version 15 sp6
Suse Public Cloud Module	Version 15 sp7
Suse Realtime Module	Version 15 sp3
Suse Realtime Module	Version 15 sp4
Suse Realtime Module	Version 15 sp5
Suse Realtime Module	Version 15 sp6
Suse Realtime Module	Version 15 sp7

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Nixos Nixos	version < 25.11

Configuration H

8 vulnerable

Vulnerable Software	Affected Versions
Arista Cloudvision Agni	2024.4.0 ≤ version ≤ 2025.2.2
Arista Cloudvision Portal	2024.2.0 ≤ version ≤ 2026.1.0
Arista Netvisor Os	version < 7.1.0
Arista Netvisor Os	Version 7.1.0
Arista Netvisor Os	Version 7.1.0 hotfix7
Arista Velocloud Edge	4.5.0 ≤ version ≤ 6.4.1
Arista Velocloud Gateway	All versions
Arista Velocloud Orchestrator	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1518 4 Pn/dp Mfp Firmware	version ≥ 3.1.5

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1518 4 Pn/dp Mfp	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Cpu 1518f 4 Pn/dp Mfp Firmware	version ≥ 3.1.5

Running on/with	Platform Versions
Siemens Simatic S7 1500 Cpu 1518f 4 Pn/dp Mfp	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Siplus S7 1500 Cpu 1518 4 Pn/dp Mfp Firmware	version ≥ 3.1.5

Running on/with	Platform Versions
Siemens Siplus S7 1500 Cpu 1518 4 Pn/dp Mfp	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic S7 1500 Tm Mfp Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic S7 1500 Tm Mfp	All versions

Configuration M

7 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 20.04
Canonical Ubuntu Linux	Version 22.04
Canonical Ubuntu Linux	Version 24.04
Canonical Ubuntu Linux	Version 25.10

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Cn 4100 Firmware	version < 6.0

Running on/with	Platform Versions
Siemens Simatic Cn 4100	All versions

Configuration O

1 vulnerable

Vulnerable Software	Affected Versions
Siemens Simatic Ax Runtime	All versions

Configuration P

4 vulnerable · 6 platform

Vulnerable Software	Affected Versions
Siemens Simatic Hmi Unified Comfort Panels Firmware	version < 21.0
Siemens Simatic Hmi Unified Comfort Panels Firmware	Version 21.0
Siemens Simatic Hmi Unified Comfort Panels Firmware	Version 21.0 update_1
Siemens Simatic Hmi Unified Comfort Panels Firmware	Version 21.0 update_2

Running on/with	Platform Versions
Siemens Simatic Hmi Mtp1000	All versions
Siemens Simatic Hmi Mtp1200	All versions
Siemens Simatic Hmi Mtp1500	All versions
Siemens Simatic Hmi Mtp1900	All versions
Siemens Simatic Hmi Mtp2200	All versions
Siemens Simatic Hmi Mtp700	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Iot2050 Advanced Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Iot2050 Advanced	All versions

Configuration R

1 vulnerable

Vulnerable Software	Affected Versions
Siemens Simatic Ipc Ied Os	All versions

Related CWEs

CWE-1288

Improper Validation of Consistency within Input

The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.

CWE-669

Incorrect Resource Transfer Between Spheres

The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

References (127)

https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

http://www.openwall.com/lists/oss-security/2026/04/29/23