CVE-2026-31431
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.
2026-05-15
CISA remediate by
CWE codes
CWE-669
Affected products
linux:linux_kernelredhat:openshift_container_platformredhat:enterprise_linuxamazon:amazon_linuxcanonical:ubuntu_linuxdebian:debian_linuxopensuse:leapsuse:caas_platformsuse:enterprise_storagesuse:manager_proxysuse:manager_retail_branch_serversuse:manager_serversuse:openstack_cloudsuse:openstack_cloud_crowbarsuse:basesystem_modulesuse:development_tools_modulesuse:legacy_modulesuse:linux_enterprise_desktopsuse:linux_enterprise_high_availability_extensionsuse:linux_enterprise_high_performance_computingsuse:linux_enterprise_live_patchingsuse:linux_enterprise_microsuse:linux_enterprise_real_timesuse:linux_enterprise_serversuse:linux_enterprise_workstation_extension
Sources