CVE-2026-31431

crypto: algif_aead - Revert to operating out-of-place

State: Published
Severity: 7.8 High
Published: Apr 22, 2026
Updated: Oct 15, 2026
Reserved: Mar 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: algif_aead - Revert to operating out-of-place

This mostly reverts commit 72548b093ee3 except for the copying of the associated data.

There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	redhat-SADP

Weaknesses

CWE-669 Incorrect Resource Transfer Between Spheres
CWE-1288 Improper Validation of Consistency within Input

Affected Products

Product	Versions
LinuxLinux	72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before 893d22e0135fa394db81df88697fba6032747667Affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before 19d43105a97be0810edbda875f2cd03f30dc130cAffected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before 961cfa271a918ad4ae452420e7c303149002875bAffected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before 3115af9644c342b356f3f07a4dd1c8905cd9a6fcAffected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before 8b88d99341f139e23bdeb1027a2a3ae10d341d82Affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8Affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before ce42ee423e58dffa5ec03524054c9d8bfd4f6237Affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5Affected
LinuxLinux	4.14Affected before 4.14Not affected 5.10.254 through 5.10.Not affected 5.15.204 through 5.15.Not affected 6.1.170 through 6.1.Not affected 6.6.137 through 6.6.Not affected 6.12.85 through 6.12.Not affected 6.18.22 through 6.18.Not affected 6.19.12 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before 893d22e0135fa394db81df88697fba6032747667Affected
72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before 19d43105a97be0810edbda875f2cd03f30dc130cAffected
72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before 961cfa271a918ad4ae452420e7c303149002875bAffected
72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before 3115af9644c342b356f3f07a4dd1c8905cd9a6fcAffected
72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before 8b88d99341f139e23bdeb1027a2a3ae10d341d82Affected
72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8Affected
72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before ce42ee423e58dffa5ec03524054c9d8bfd4f6237Affected
72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to before a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5Affected

LinuxLinux

4.14Affected
before 4.14Not affected
5.10.254 through 5.10.*Not affected
5.15.204 through 5.15.*Not affected
6.1.170 through 6.1.*Not affected
6.6.137 through 6.6.*Not affected
6.12.85 through 6.12.*Not affected
6.18.22 through 6.18.*Not affected
6.19.12 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.