# CVE-2026-31431

> **Linux Kernel** vulnerability · **listed in CISA Known Exploited Vulnerabilities catalog** · severity: **HIGH** (CVSS 7.8).

## Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: algif_aead - Revert to operating out-of-place

This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.

There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings.  Get rid of
all the complexity added for in-place operation and just copy the
AD directly.

## Key facts

- **CVE ID:** CVE-2026-31431
- **Vendor:** Linux
- **Product:** Kernel
- **Published:** 2026-04-22
- **CVSS severity:** HIGH
- **CVSS base score:** 7.8
- **CISA remediation due date:** 2026-05-15
- **CWE codes:** CWE-669

## Affected products

- `linux:linux_kernel`
- `redhat:openshift_container_platform`
- `redhat:enterprise_linux`
- `amazon:amazon_linux`
- `canonical:ubuntu_linux`
- `debian:debian_linux`
- `opensuse:leap`
- `suse:caas_platform`
- `suse:enterprise_storage`
- `suse:manager_proxy`
- `suse:manager_retail_branch_server`
- `suse:manager_server`
- `suse:openstack_cloud`
- `suse:openstack_cloud_crowbar`
- `suse:basesystem_module`
- `suse:development_tools_module`
- `suse:legacy_module`
- `suse:linux_enterprise_desktop`
- `suse:linux_enterprise_high_availability_extension`
- `suse:linux_enterprise_high_performance_computing`

## Primary sources

- NIST NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-31431
- CISA KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

## Citation

> AI Analytics. CVE-2026-31431. Retrieved 2026-07-23 from https://api.ai-analytics.org/cve/CVE-2026-31431. Derived from NIST NVD + CISA KEV. Licensed CC0.

---

*[Dataset catalog](https://api.ai-analytics.org/datasets/) · [AI Analytics](https://api.ai-analytics.org/) · CC0 1.0*