August 10, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-31431NVD

Vulnerability Summary

In the Linux kernel, the following vulnerability has been resolved:

crypto: algif_aead - Revert to operating out-of-place

This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.

There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.
Severity Level
HIGH(7.8)
Published Date
Apr 22, 2026
Last Modified
Jul 28, 2026
Exploitation Status
ACTIVE
EPSS Score (30-Day)
99.91%Probability
Root Weakness (CWE)
N/A
CVSS v3.1 Base Metrics
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

External References