crypto: algif_aead - Revert to operating out-of-place (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 98.11 % · percentile 100 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
Weaknesses (CWE)
- CWE-669 — Incorrect Resource Transfer Between Spheres
- CWE-1288 — Improper Validation of Consistency within Input
References
- https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667
- https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c
- https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b
- https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc
- https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82
- https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8
- https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237
- https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5
- https://github.com/theori-io/copy-fail-CVE-2026-31431
- https://xint.io/blog/copy-fail-linux-distributions#the-fix-6
- https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/
- https://access.redhat.com/security/cve/cve-2026-31431#cve-details-mitigation
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-31431
- http://www.openwall.com/lists/oss-security/2026/04/29/23
- https://copy.fail
- http://www.openwall.com/lists/oss-security/2026/04/29/25
- http://www.openwall.com/lists/oss-security/2026/04/29/26
- http://www.openwall.com/lists/oss-security/2026/04/30/2
- http://www.openwall.com/lists/oss-security/2026/04/30/5
- http://www.openwall.com/lists/oss-security/2026/04/30/6
- http://www.openwall.com/lists/oss-security/2026/04/30/10
- http://www.openwall.com/lists/oss-security/2026/04/30/11
- http://www.openwall.com/lists/oss-security/2026/04/30/12
- http://www.openwall.com/lists/oss-security/2026/04/30/14
- http://www.openwall.com/lists/oss-security/2026/04/30/15
- http://www.openwall.com/lists/oss-security/2026/04/30/16
- http://www.openwall.com/lists/oss-security/2026/04/30/17
- http://www.openwall.com/lists/oss-security/2026/04/30/18
- https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170
- http://www.openwall.com/lists/oss-security/2026/04/30/20
- http://www.openwall.com/lists/oss-security/2026/05/01/2
- http://www.openwall.com/lists/oss-security/2026/05/01/3
- http://www.openwall.com/lists/oss-security/2026/05/01/10
- http://www.openwall.com/lists/oss-security/2026/05/01/12
- http://www.openwall.com/lists/oss-security/2026/05/01/15
- http://www.openwall.com/lists/oss-security/2026/05/01/16
- http://www.openwall.com/lists/oss-security/2026/05/01/17
- http://www.openwall.com/lists/oss-security/2026/05/01/18
- http://www.openwall.com/lists/oss-security/2026/05/01/22
- http://www.openwall.com/lists/oss-security/2026/05/01/23
- http://www.openwall.com/lists/oss-security/2026/05/01/24
- http://www.openwall.com/lists/oss-security/2026/05/02/4
- http://www.openwall.com/lists/oss-security/2026/05/02/5
- http://www.openwall.com/lists/oss-security/2026/05/02/6
- http://www.openwall.com/lists/oss-security/2026/05/02/7
- http://www.openwall.com/lists/oss-security/2026/05/02/8
- http://www.openwall.com/lists/oss-security/2026/05/02/14
- http://www.openwall.com/lists/oss-security/2026/05/02/15
- http://www.openwall.com/lists/oss-security/2026/05/02/16
- http://www.openwall.com/lists/oss-security/2026/05/02/17
- +77 more
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | redhat-SADP |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c (Secondary) |
European references
- ENISA EUVD · EUVD-2026-24639
- GCVE · GCVE-0-2026-31431
CERT-FR advisories
- CERTFR-2026-AVI-1133 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1093 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1091 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1064 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1029 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0880 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0861 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0832 — Multiples vulnérabilités dans le noyau Linux de Red Hat · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0831 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0806 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0787 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0746 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0695 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0667 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0663 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0638 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0604 — Multiples vulnérabilités dans le noyau Linux de Red Hat · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0603 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0549 — Multiples vulnérabilités dans le noyau Linux de Red Hat · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0548 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0547 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0546 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0545 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0528 — Vulnérabilité dans Qnap QTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0527 — Multiples vulnérabilités dans VMware Tanzu Kubernetes Runtime · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0526 — Multiples vulnérabilités dans les produits Microsoft · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.14 < 5.10.254cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.15.204cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16 < 6.1.170cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.2 < 6.6.137cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.7 < 6.12.85cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.13 < 6.18.22cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.19 < 6.19.12cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*≥ 4.12 < 4.12.89cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*≥ 4.13 < 4.13.66cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*≥ 4.14 < 4.14.65cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*≥ 4.15 < 4.15.64cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*≥ 4.16 < 4.16.61cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*≥ 4.17 < 4.17.53cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*≥ 4.18 < 4.18.40cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*≥ 4.19 < 4.19.30cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*≥ 4.20 < 4.20.21cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*≥ 4.21 < 4.21.14cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_tus:8.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_tus:8.8:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*cpe:2.3:o:amazon:amazon_linux:-:*:*:*:*:*:*:*- +167 more
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 < 893d22e0135fa394db81df88697fba6032747667 ; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 < 19d43105a97be0810edbda875f2cd03f30dc130c ; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 < 961cfa271a918ad4ae452420e7c303149002875b ; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 < 3115af9644c342b356f3f07a4dd1c8905cd9a6fc ; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 < 8b88d99341f139e23bdeb1027a2a3ae10d341d82 ; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 < fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8 |
| Linux · Linux | affected 4.14 ; unaffected 0 < 4.14 ; unaffected 5.10.254 ≤ 5.10.* ; unaffected 5.15.204 ≤ 5.15.* ; unaffected 6.1.170 ≤ 6.1.* ; unaffected 6.6.137 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| CISA Known Exploited Vulnerabilities | CC0 1.0 |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |