{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-31431", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-03-09T15:48:24.089Z", "datePublished": "2026-04-22T08:15:10.123Z", "dateUpdated": "2026-05-12T12:09:03.910Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T22:08:34.612Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - Revert to operating out-of-place\n\nThis mostly reverts commit 72548b093ee3 except for the copying of\nthe associated data.\n\nThere is no benefit in operating in-place in algif_aead since the\nsource and destination come from different mappings.  Get rid of\nall the complexity added for in-place operation and just copy the\nAD directly."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["crypto/af_alg.c", "crypto/algif_aead.c", "crypto/algif_skcipher.c", "include/crypto/if_alg.h"], "versions": [{"version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "893d22e0135fa394db81df88697fba6032747667", "status": "affected", "versionType": "git"}, {"version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "19d43105a97be0810edbda875f2cd03f30dc130c", "status": "affected", "versionType": "git"}, {"version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "961cfa271a918ad4ae452420e7c303149002875b", "status": "affected", "versionType": "git"}, {"version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "3115af9644c342b356f3f07a4dd1c8905cd9a6fc", "status": "affected", "versionType": "git"}, {"version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "8b88d99341f139e23bdeb1027a2a3ae10d341d82", "status": "affected", "versionType": "git"}, {"version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8", "status": "affected", "versionType": "git"}, {"version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "ce42ee423e58dffa5ec03524054c9d8bfd4f6237", "status": "affected", "versionType": "git"}, {"version": "72548b093ee38a6d4f2a19e6ef1948ae05c181f7", "lessThan": "a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["crypto/af_alg.c", "crypto/algif_aead.c", "crypto/algif_skcipher.c", "include/crypto/if_alg.h"], "versions": [{"version": "4.14", "status": "affected"}, {"version": "0", "lessThan": "4.14", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.254", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.204", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.170", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.137", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.85", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.22", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.12", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "5.10.254"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "5.15.204"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "6.1.170"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "6.6.137"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "6.12.85"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "6.18.22"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "6.19.12"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667"}, {"url": "https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c"}, {"url": "https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b"}, {"url": "https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc"}, {"url": "https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82"}, {"url": "https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8"}, {"url": "https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237"}, {"url": "https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5"}], "title": "crypto: algif_aead - Revert to operating out-of-place", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-669", "lang": "en", "description": "CWE-669 Incorrect Resource Transfer Between Spheres"}]}], "references": [{"url": "https://github.com/theori-io/copy-fail-CVE-2026-31431", "tags": ["exploit"]}, {"url": "https://xint.io/blog/copy-fail-linux-distributions#the-fix-6", "tags": ["mitigation"]}, {"url": "https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/", "tags": ["mitigation"]}, {"url": "https://access.redhat.com/security/cve/cve-2026-31431#cve-details-mitigation", "tags": ["mitigation"]}, {"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-31431", "tags": ["government-resource"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-29T00:00:00+00:00", "options": [{"Exploitation": "active"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-31431"}}}, {"other": {"type": "kev", "content": {"dateAdded": "2026-05-01", "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-31431"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-02T03:55:23.146Z"}, "timeline": [{"time": "2026-05-01T00:00:00.000Z", "lang": "en", "value": "CVE-2026-31431 added to CISA KEV"}]}, {"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/04/29/23"}, {"url": "https://copy.fail"}, {"url": "http://www.openwall.com/lists/oss-security/2026/04/29/25"}, {"url": "http://www.openwall.com/lists/oss-security/2026/04/29/26"}, {"url": "http://www.openwall.com/lists/oss-security/2026/04/30/2"}, {"url": "http://www.openwall.com/lists/oss-security/2026/04/30/5"}, {"url": "http://www.openwall.com/lists/oss-security/2026/04/30/6"}, {"url": "http://www.openwall.com/lists/oss-security/2026/04/30/10"}, {"url": "http://www.openwall.com/lists/oss-security/2026/04/30/11"}, {"url": "http://www.openwall.com/lists/oss-security/2026/04/30/12"}, {"url": "http://www.openwall.com/lists/oss-security/2026/04/30/14"}, {"url": "http://www.openwall.com/lists/oss-security/2026/04/30/15"}, {"url": "http://www.openwall.com/lists/oss-security/2026/04/30/16"}, {"url": "http://www.openwall.com/lists/oss-security/2026/04/30/17"}, {"url": "http://www.openwall.com/lists/oss-security/2026/04/30/18"}, {"url": "https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170"}, {"url": "http://www.openwall.com/lists/oss-security/2026/04/30/20"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/01/2"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/01/3"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/01/10"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/01/12"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/01/15"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/01/16"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/01/17"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/01/18"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/01/22"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/01/23"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/01/24"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/4"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/5"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/6"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/7"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/8"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/14"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/15"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/16"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/17"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/18"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/19"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/20"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/21"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/23"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/24"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/02/25"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/03/3"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/03/4"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/03/10"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/03/5"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/03/6"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/03/12"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/03/13"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/04/1"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/04/2"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/04/10"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/04/11"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/04/12"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/04/13"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/04/14"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/04/8"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/04/9"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/04/24"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/04/27"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/04/28"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/04/29"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/04/31"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/06/5"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/07/2"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/07/12"}, {"url": "http://www.openwall.com/lists/oss-security/2026/05/08/13"}, {"url": "https://www.kb.cert.org/vuls/id/260001"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-05-08T20:21:41.291Z"}}, {"x_adpType": "supplier", "providerMetadata": {"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e", "shortName": "siemens-SADP", "dateUpdated": "2026-05-12T12:09:03.910Z"}, "affected": [{"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.5", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.5", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.5", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.5", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP", "versions": [{"status": "affected", "version": "V3.1.5", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}], "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}]}]}}