CVE-2026-31431 — crypto: algif_aead - Revert to operating out-of-place

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Affected (CNA)

Vendor / product	Versions
Linux / Linux	affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before 893d22e0135fa394db81df88697fba6032747667; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before 19d43105a97be0810edbda875f2cd03f30dc130c; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before 961cfa271a918ad4ae452420e7c303149002875b; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before 3115af9644c342b356f3f07a4dd1c8905cd9a6fc; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before 8b88d99341f139e23bdeb1027a2a3ae10d341d82; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before ce42ee423e58dffa5ec03524054c9d8bfd4f6237; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5
Linux / Linux	affected 4.14; unaffected 0 before 4.14; unaffected 5.10.254 through 5.10.; unaffected 5.15.204 through 5.15.; unaffected 6.1.170 through 6.1.; unaffected 6.6.137 through 6.6.; unaffected 6.12.85 through 6.12.; unaffected 6.18.22 through 6.18.; unaffected 6.19.12 through 6.19.; unaffected 7.0 through

Vendor / product

Versions

Linux / Linux

affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before 893d22e0135fa394db81df88697fba6032747667; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before 19d43105a97be0810edbda875f2cd03f30dc130c; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before 961cfa271a918ad4ae452420e7c303149002875b; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before 3115af9644c342b356f3f07a4dd1c8905cd9a6fc; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before 8b88d99341f139e23bdeb1027a2a3ae10d341d82; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before ce42ee423e58dffa5ec03524054c9d8bfd4f6237; affected 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 before a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5

Linux / Linux

affected 4.14; unaffected 0 before 4.14; unaffected 5.10.254 through 5.10.*; unaffected 5.15.204 through 5.15.*; unaffected 6.1.170 through 6.1.*; unaffected 6.6.137 through 6.6.*; unaffected 6.12.85 through 6.12.*; unaffected 6.18.22 through 6.18.*; unaffected 6.19.12 through 6.19.*; unaffected 7.0 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

CVE

No English description supplied.

siemens-SADP

No English description supplied.

redhat-SADP

A flaw was found in the Linux kernel's algif_aead cryptographic algorithm interface. An incorrect in-place operation causes source and destination data mappings to differ during cryptographic processing. A low-privileged local attacker can exploit this flaw to corrupt the contents of sensitive system files and escalate to root privileges.