CVE-2026-31431
Aliases:RHSA-2026:15976UBUNTU-CVE-2026-31431DEBIAN-CVE-2026-31431RHSA-2026:14926RHSA-2026:15978RHSA-2026:16018RHSA-2026:16063RHSA-2026:16111RHSA-2026:16208RHSA-2026:16209RHSA-2026:16210CGA-264j-7mjh-g6fgCGA-45p5-32r4-wpc5CGA-777j-9359-v4fmCGA-c34j-wrf8-jmhxCGA-cfvm-96rm-h9cxCGA-mv3m-43pf-mm3cCGA-v6f9-5h8w-hf7mopenSUSE-SU-2026:11765-1
Advisory lineage Upstream: 0 Downstream: 83
Analyzed
Published: 22 Apr 2026, 08:15
Last modified:08 Sept 2026, 08:47
Vulnerability Summary
Overall Risk (default)
high
61/100 CVSS Score
7.8 HIGH
v3.1 (cve.org)
EPSS Score
99.91% CRITICAL
100% probability +3.64%
KEV
Listed
CIRCL • CISA
2 listings
Ransomware
No reports
Public exploits
9 found
Dark Web
Not detected
Timeline
22 Apr 2026, 08:15
Published
Vulnerability first disclosed
01 May 2026, 00:00
Added to CISA KEV
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
02 May 2026, 00:00
Added to CIRCL KEV
Added to Known Exploited Vulnerabilities catalog
15 May 2026, 00:00
CISA Remediation Due
"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
08 Sept 2026, 08:47
Last Modified
Vulnerability information updated
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
CVSS Metrics
- v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Trends
Current EPSS score: 99.91%• Percentile: 100%
Techniques & Countermeasures
- CWE-669•Incorrect Resource Transfer Between Spheres
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.
- CWE-1288•Improper Validation of Consistency within Input
The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.
Affected Systems
- amazon•amazon_linux
na
- chainguard•linux-aws-6.12
< 6.12.83-r2
- chainguard•linux-azure-6.12
< 6.12.83-r2
- chainguard•linux-gcp-6.12
< 6.12.83-r2
- chainguard•linux-qemu-6.12
< 6.12.85-r0
- chainguard•linux-vmware-6.12
< 6.12.85-r0
- arista•cloudvision_agni
≥ 2024.4.0, ≤ 2025.2.2
- arista•cloudvision_portal
≥ 2024.2.0, ≤ 2026.1.0
- arista•netvisor_os
< 7.1.0 | 7.1.0 | 7.1.0:hotfix7
- arista•velocloud_edge
≥ 4.5.0, ≤ 6.4.1
- arista•velocloud_gateway
na
- arista•velocloud_orchestrator
na
- canonical•ubuntu_linux
na | 14.04 | 16.04 | 18.04 | 20.04 | 22.04 | 24.04 | 25.10
- debian•linux
< 5.10.251-3 | < 6.1.170-1 | < 6.12.85-1 | < 6.19.12-1
- debian•linux-6.1
< 6.1.170-1~deb11u1
- ubuntu•linux
< 4.15.0-250.262 | < 5.4.0-230.250 | < 5.15.0-179.189 | < 6.8.0-117.117 | < 6.17.0-29.29
- ubuntu•linux-allwinner-5.19
all
- ubuntu•linux-aws
< 4.15.0-1192.205 | < 5.4.0-1159.169 | < 5.15.0-1108.115 | < 6.8.0-1055.58 | < 6.17.0-1015.15
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
all
- ubuntu•linux-aws-5.13
all
- ubuntu•linux-aws-5.15
< 5.15.0-1108.115~20.04.1
- ubuntu•linux-aws-5.19
all
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.4
< 5.4.0-1160.170~18.04.1
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-aws-6.14
all
- ubuntu•linux-aws-6.17
< 6.17.0-1017.17~24.04.1
- ubuntu•linux-aws-6.2
all
- ubuntu•linux-aws-6.5
all
- ubuntu•linux-aws-6.8
< 6.8.0-1057.60~22.04.1
- ubuntu•linux-aws-fips
< 4.15.0-2130.136 | all | < 5.4.0-1159.169+fips1 | < 5.15.0-1108.115+fips1 | < 6.8.0-1055.58+fips1
- ubuntu•linux-aws-hwe
< 4.15.0-1192.205~16.04.1
- ubuntu•linux-azure
< 4.15.0-1201.216~14.04.1 | all | < 5.4.0-1163.169 | < 5.15.0-1114.123 | < 6.8.0-1056.62 | < 6.17.0-1015.15
- ubuntu•linux-azure-4.15
< 4.15.0-1201.216
- ubuntu•linux-azure-5.11
all
- ubuntu•linux-azure-5.13
all
- ubuntu•linux-azure-5.15
< 5.15.0-1114.123~20.04.1
- ubuntu•linux-azure-5.19
all
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.4
< 5.4.0-1163.169~18.04.1
- ubuntu•linux-azure-5.8
all
- ubuntu•linux-azure-6.11
all
- ubuntu•linux-azure-6.14
all
- ubuntu•linux-azure-6.17
< 6.17.0-1015.15~24.04.1
- ubuntu•linux-azure-6.2
all
- ubuntu•linux-azure-6.5
all
- ubuntu•linux-azure-6.8
< 6.8.0-1059.65~22.04.1
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
all | all | all | all
Showing first 50 affected entries in server-rendered view.
References (191)
- https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8
- https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237
- https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5
- https://github.com/theori-io/copy-fail-CVE-2026-31431
- http://www.openwall.com/lists/oss-security/2026/04/29/23
- https://copy.fail
- http://www.openwall.com/lists/oss-security/2026/04/29/25
- http://www.openwall.com/lists/oss-security/2026/04/29/26
- http://www.openwall.com/lists/oss-security/2026/04/30/2
- http://www.openwall.com/lists/oss-security/2026/04/30/5
- http://www.openwall.com/lists/oss-security/2026/04/30/6
- https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667
- https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c
- https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b
- https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc
- https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82
- http://www.openwall.com/lists/oss-security/2026/04/30/10
- http://www.openwall.com/lists/oss-security/2026/04/30/11
- http://www.openwall.com/lists/oss-security/2026/04/30/12
- http://www.openwall.com/lists/oss-security/2026/04/30/14
- http://www.openwall.com/lists/oss-security/2026/04/30/15
- http://www.openwall.com/lists/oss-security/2026/04/30/16
- http://www.openwall.com/lists/oss-security/2026/04/30/17
- http://www.openwall.com/lists/oss-security/2026/04/30/18
- https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170
- http://www.openwall.com/lists/oss-security/2026/04/30/20
- http://www.openwall.com/lists/oss-security/2026/05/01/2
- http://www.openwall.com/lists/oss-security/2026/05/01/3
- https://xint.io/blog/copy-fail-linux-distributions#the-fix-6
- https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/
- https://access.redhat.com/security/cve/cve-2026-31431#cve-details-mitigation
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-31431
- http://www.openwall.com/lists/oss-security/2026/05/01/10
- http://www.openwall.com/lists/oss-security/2026/05/01/12
- http://www.openwall.com/lists/oss-security/2026/05/01/15
- http://www.openwall.com/lists/oss-security/2026/05/01/16
- http://www.openwall.com/lists/oss-security/2026/05/01/17
- http://www.openwall.com/lists/oss-security/2026/05/01/18
- http://www.openwall.com/lists/oss-security/2026/05/01/22
- http://www.openwall.com/lists/oss-security/2026/05/01/23
- http://www.openwall.com/lists/oss-security/2026/05/01/24
- http://www.openwall.com/lists/oss-security/2026/05/02/4
- http://www.openwall.com/lists/oss-security/2026/05/02/5
- http://www.openwall.com/lists/oss-security/2026/05/02/6
- http://www.openwall.com/lists/oss-security/2026/05/02/7
- http://www.openwall.com/lists/oss-security/2026/05/02/8
- http://www.openwall.com/lists/oss-security/2026/05/02/14
- http://www.openwall.com/lists/oss-security/2026/05/02/15
- http://www.openwall.com/lists/oss-security/2026/05/02/16
- http://www.openwall.com/lists/oss-security/2026/05/02/17
- http://www.openwall.com/lists/oss-security/2026/05/02/18
- http://www.openwall.com/lists/oss-security/2026/05/02/19
- http://www.openwall.com/lists/oss-security/2026/05/02/20
- http://www.openwall.com/lists/oss-security/2026/05/02/21
- http://www.openwall.com/lists/oss-security/2026/05/02/23
- http://www.openwall.com/lists/oss-security/2026/05/02/24
- http://www.openwall.com/lists/oss-security/2026/05/02/25
- http://www.openwall.com/lists/oss-security/2026/05/03/3
- http://www.openwall.com/lists/oss-security/2026/05/03/4
- http://www.openwall.com/lists/oss-security/2026/05/03/10
- http://www.openwall.com/lists/oss-security/2026/05/03/5
- http://www.openwall.com/lists/oss-security/2026/05/03/6
- http://www.openwall.com/lists/oss-security/2026/05/03/12
- http://www.openwall.com/lists/oss-security/2026/05/03/13
- http://www.openwall.com/lists/oss-security/2026/05/04/1
- http://www.openwall.com/lists/oss-security/2026/05/04/2
- http://www.openwall.com/lists/oss-security/2026/05/04/10
- http://www.openwall.com/lists/oss-security/2026/05/04/11
- http://www.openwall.com/lists/oss-security/2026/05/04/12
- http://www.openwall.com/lists/oss-security/2026/05/04/13
- http://www.openwall.com/lists/oss-security/2026/05/04/14
- http://www.openwall.com/lists/oss-security/2026/05/04/8
- http://www.openwall.com/lists/oss-security/2026/05/04/9
- http://www.openwall.com/lists/oss-security/2026/05/04/24
- http://www.openwall.com/lists/oss-security/2026/05/04/27
- http://www.openwall.com/lists/oss-security/2026/05/04/28
- http://www.openwall.com/lists/oss-security/2026/05/04/29
- http://www.openwall.com/lists/oss-security/2026/05/04/31
- http://www.openwall.com/lists/oss-security/2026/05/06/5
- http://www.openwall.com/lists/oss-security/2026/05/07/2
- http://www.openwall.com/lists/oss-security/2026/05/07/12
- http://www.openwall.com/lists/oss-security/2026/05/08/13
- https://www.kb.cert.org/vuls/id/260001
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- http://www.openwall.com/lists/oss-security/2026/05/18/3
- https://access.redhat.com/security/cve/CVE-2026-31431
- https://bugzilla.redhat.com/show_bug.cgi?id=2460538
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31431.json
- https://access.redhat.com/errata/RHSA-2026:14926
- https://access.redhat.com/errata/RHSA-2026:14097
- https://access.redhat.com/errata/RHSA-2026:14112
- https://access.redhat.com/errata/RHSA-2026:15087
- https://access.redhat.com/errata/RHSA-2026:14773
- https://access.redhat.com/errata/RHSA-2026:13729
- https://access.redhat.com/errata/RHSA-2026:13885
- https://access.redhat.com/errata/RHSA-2026:13727
- https://access.redhat.com/errata/RHSA-2026:13690
- https://access.redhat.com/errata/RHSA-2026:13862
- https://access.redhat.com/errata/RHSA-2026:13811
- https://access.redhat.com/errata/RHSA-2026:13887
- https://access.redhat.com/errata/RHSA-2026:13566
- https://access.redhat.com/errata/RHSA-2026:19074
- https://access.redhat.com/errata/RHSA-2026:13936
- https://access.redhat.com/errata/RHSA-2026:13734
- https://access.redhat.com/errata/RHSA-2026:13932
- https://access.redhat.com/errata/RHSA-2026:14339
- https://access.redhat.com/errata/RHSA-2026:13565
- https://access.redhat.com/errata/RHSA-2026:19225
- https://access.redhat.com/errata/RHSA-2026:13577
- https://access.redhat.com/errata/RHSA-2026:15976
- https://access.redhat.com/errata/RHSA-2026:14165
- https://access.redhat.com/errata/RHSA-2026:14230
- https://access.redhat.com/errata/RHSA-2026:16111
- https://access.redhat.com/errata/RHSA-2026:13681
- https://access.redhat.com/errata/RHSA-2026:16210
- https://access.redhat.com/errata/RHSA-2026:16209
- https://access.redhat.com/errata/RHSA-2026:16208
- https://access.redhat.com/errata/RHSA-2026:16063
- https://access.redhat.com/errata/RHSA-2026:16018
- https://access.redhat.com/errata/RHSA-2026:15978
- https://access.redhat.com/errata/RHSA-2026:13578
- https://access.redhat.com/errata/RHSA-2026:14137
- https://access.redhat.com/errata/RHSA-2026:14301
- https://access.redhat.com/errata/RHSA-2026:33486
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://access.redhat.com/security/updates/classification/#important
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_15976.json
- https://access.redhat.com/security/vulnerabilities/RHSB-2026-002
- https://www.cve.org/CVERecord?id=CVE-2026-31431
- https://nvd.nist.gov/vuln/detail/CVE-2026-31431
- https://access.redhat.com/articles/7141989
- https://access.redhat.com/solutions/7141931
- https://access.redhat.com/solutions/7141979
- https://access.redhat.com/solutions/7141990
- https://access.redhat.com/solutions/7141996
- https://access.redhat.com/solutions/7142032
- https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/managing_monitoring_and_updating_the_kernel/configuring-kernel-command-line-parameters_managing-monitoring-and-updating-the-kernel
- https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/T
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://ubuntu.com/security/CVE-2026-31431
- https://copy.fail/
- https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available
- https://xint.io/blog/copy-fail-linux-distributions
- https://www.openwall.com/lists/oss-security/2026/04/29/23
- https://git.kernel.org/linus/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5
- https://ubuntu.com/security/notices/USN-8226-1
- https://ubuntu.com/security/notices/USN-8277-1
- https://ubuntu.com/security/notices/USN-8278-1
- https://ubuntu.com/security/notices/USN-8279-1
- https://ubuntu.com/security/notices/USN-8280-1
- https://ubuntu.com/security/notices/USN-8281-1
- https://ubuntu.com/security/notices/USN-8289-1
- https://ubuntu.com/security/notices/USN-8277-2
- https://ubuntu.com/security/notices/USN-8279-2
- https://ubuntu.com/security/notices/USN-8280-2
- https://ubuntu.com/security/notices/USN-8281-2
- https://ubuntu.com/security/notices/USN-8279-3
- https://ubuntu.com/security/notices/USN-8289-2
- https://ubuntu.com/security/notices/USN-8305-1
- https://ubuntu.com/security/notices/USN-8278-2
- https://ubuntu.com/security/notices/USN-8280-3
- https://ubuntu.com/security/notices/USN-8305-2
- https://ubuntu.com/security/notices/USN-8310-1
- https://ubuntu.com/security/notices/USN-8350-1
- https://ubuntu.com/security/notices/USN-8351-1
- https://ubuntu.com/security/notices/USN-8374-1
- https://ubuntu.com/security/notices/USN-8391-1
- https://ubuntu.com/security/notices/USN-8392-1
- https://ubuntu.com/security/notices/USN-8393-1
- https://ubuntu.com/security/notices/USN-8426-1
- https://ubuntu.com/security/notices/USN-8426-2
- https://ubuntu.com/security/notices/USN-8440-1
- https://ubuntu.com/security/notices/USN-8441-1
- https://ubuntu.com/security/notices/USN-8462-1
- https://ubuntu.com/security/notices/USN-8499-1
- https://ubuntu.com/security/notices/USN-8528-1
- https://security-tracker.debian.org/tracker/CVE-2026-31431
- https://issues.redhat.com/browse/VOYAGER-730
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14926.json
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_15978.json
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_16018.json
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_16063.json
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_16111.json
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_16208.json
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_16209.json
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_16210.json
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31431.json
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://cert-portal.siemens.com/productcert/html/ssa-328642.html
- https://www.suse.com/security/cve/CVE-2026-31431