CVE-2026-31431 : faille exploitée linux linux kernel (CVSS 7.8)

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

En bref

Sévérité: Élevée (CVSS 7.8)
Vecteur CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitation active: Oui, inscrite au catalogue CISA KEV
Publication: 22 avr. 2026
Dernière mise à jour: 8 sept. 2026

Produits concernés

linux linux kernel
redhat openshift container platform
redhat enterprise linux
redhat enterprise linux aus
redhat enterprise linux eus
redhat enterprise linux tus
redhat enterprise linux update services for sap solutions
amazon amazon linux
canonical ubuntu linux
debian debian linux
opensuse leap
suse caas platform
suse enterprise storage
suse manager proxy
suse manager retail branch server
suse manager server
suse openstack cloud
suse openstack cloud crowbar
suse basesystem module
suse development tools module

Correctif et mesures

"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description

En bref

Produits concernés

Correctif et mesures

Références