High 7.8
Known exploited (CISA KEV)

CVE-2026-31431

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Scores

CVSS out of 10, high severity.

EPSS chance of exploitation in the next 30 days.

The facts

Published

22 April 2026

Last changed

8 September 2026

NVD status

Analyzed

Severity

High, CVSS 7.8 out of 10 (version 3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

Affects

linux linux kernel
redhat openshift container platform
redhat enterprise linux
redhat enterprise linux aus
redhat enterprise linux eus

Known exploited

Yes. CISA added it to the Known Exploited Vulnerabilities catalogue on 1 May 2026.

EPSS

3.4% chance of exploitation activity in the next 30 days (percentile 89).

Is there a Securelyn advisory?

Not yet. Securelyn writes plain-English advisories for the flaws that matter most to businesses. Subscribe to the digest to hear about them.

Scores

The facts

Is there a Securelyn advisory?

References