CVE-2026-31431
High7.8CISA KEV — exploited in the wildIn the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
- CVSS
- 7.8v3.1
- EPSS (exploit probability)
- 3.4%89th pct
- CISA KEV
- Listed
EPSS trendFIRST daily scores, last 90 days
Daily values
| Score date | EPSS | Percentile |
|---|---|---|
| 2026-10-20 | 3.4% | 88.8% |
| 2026-10-19 | 3.4% | 88.8% |
| 2026-10-18 | 3.4% | 88.8% |
| 2026-10-16 | 3.4% | 88.8% |
| 2026-10-15 | 3.4% | 88.8% |
| 2026-10-14 | 3.4% | 88.8% |
| 2026-10-13 | 3.4% | 88.7% |
| 2026-10-12 | 3.4% | 88.7% |
| 2026-10-11 | 3.4% | 88.7% |
| 2026-10-10 | 3.4% | 88.7% |
| 2026-10-09 | 3.4% | 88.6% |
| 2026-10-08 | 3.4% | 88.6% |
| 2026-10-07 | 3.4% | 88.6% |
| 2026-10-06 | 3.4% | 88.6% |
| 2026-10-05 | 3.4% | 88.6% |
| 2026-10-04 | 3.4% | 88.6% |
| 2026-10-03 | 3.4% | 88.6% |
| 2026-10-02 | 3.4% | 88.6% |
| 2026-10-01 | 3.4% | 88.6% |
| 2026-09-30 | 3.4% | 88.6% |
| 2026-09-29 | 3.4% | 88.5% |
| 2026-09-27 | 3.4% | 88.5% |
| 2026-09-26 | 3.4% | 88.5% |
| 2026-09-25 | 3.4% | 88.5% |
| 2026-09-24 | 3.4% | 88.5% |
| 2026-09-23 | 99.9% | 100.0% |
| 2026-09-22 | 99.9% | 100.0% |
| 2026-09-21 | 99.9% | 100.0% |
| 2026-09-20 | 99.9% | 100.0% |
| 2026-09-19 | 99.9% | 100.0% |
| 2026-09-18 | 99.9% | 100.0% |
CISA KEV entrycatalogue 2026.10.20
- Date added
- 2026-05-01
- Federal due date
- 2026-05-15
- Known ransomware use
- Unknown
Required action
"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Verbatim from the CISA KEV catalogue (CISA KEV, fetched 2026-10-21 10:34 UTC). The due date applies to US federal agencies under BOD 22-01.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
- linux linux kernel
- redhat openshift container platform
- redhat enterprise linux
- redhat enterprise linux aus
- redhat enterprise linux eus
- redhat enterprise linux tus
- redhat enterprise linux update services for sap solutions
- amazon amazon linux
- canonical ubuntu linux
- debian debian linux
- opensuse leap
- suse caas platform
- suse enterprise storage
- suse manager proxy
- suse manager retail branch server
- suse manager server
- suse openstack cloud
- suse openstack cloud crowbar
- suse basesystem module
- suse development tools module
- suse legacy module
- suse linux enterprise desktop
- suse linux enterprise high availability extension
- suse linux enterprise high performance computing
- suse linux enterprise live patching
- suse linux enterprise micro
- suse linux enterprise real time
- suse linux enterprise server
- suse linux enterprise workstation extension
- suse linux micro
- suse public cloud module
- suse realtime module
- nixos nixos
- arista cloudvision agni
- arista cloudvision portal
- arista velocloud edge
- arista velocloud gateway
- arista velocloud orchestrator
- arista netvisor os
- siemens simatic s7-1500 cpu 1518-4 pn/dp mfp firmware
Coverage1 article
References
- https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c
- https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc
- https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667
- https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82
- https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b
- https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5
- https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237
- https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8
- http://www.openwall.com/lists/oss-security/2026/04/29/23
- http://www.openwall.com/lists/oss-security/2026/04/29/25
- http://www.openwall.com/lists/oss-security/2026/04/29/26
- http://www.openwall.com/lists/oss-security/2026/04/30/10
- http://www.openwall.com/lists/oss-security/2026/04/30/11
- http://www.openwall.com/lists/oss-security/2026/04/30/12
- http://www.openwall.com/lists/oss-security/2026/04/30/14
- http://www.openwall.com/lists/oss-security/2026/04/30/15
- http://www.openwall.com/lists/oss-security/2026/04/30/16
- http://www.openwall.com/lists/oss-security/2026/04/30/17
- http://www.openwall.com/lists/oss-security/2026/04/30/18
- http://www.openwall.com/lists/oss-security/2026/04/30/2
- http://www.openwall.com/lists/oss-security/2026/04/30/20
- http://www.openwall.com/lists/oss-security/2026/04/30/5
- http://www.openwall.com/lists/oss-security/2026/04/30/6
- http://www.openwall.com/lists/oss-security/2026/05/01/10
- http://www.openwall.com/lists/oss-security/2026/05/01/12
- http://www.openwall.com/lists/oss-security/2026/05/01/15
- http://www.openwall.com/lists/oss-security/2026/05/01/16
- http://www.openwall.com/lists/oss-security/2026/05/01/17
- http://www.openwall.com/lists/oss-security/2026/05/01/18
- http://www.openwall.com/lists/oss-security/2026/05/01/2