← Database

CVE-2026-31431

HIGH CVSS: 7.8 Published: 2026-04-22 Modified: 2026-07-28

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Affected Platforms

Siemens Simatic S7-1500 Cpu 1518-4 Pn\/Dp Mfp FirmwareSuse Public Cloud ModuleCanonical Ubuntu LinuxArista Velocloud GatewayDebian Debian LinuxSiemens Siplus S7-1500 Cpu 1518-4 Pn\/Dp MfpSuse Linux Enterprise MicroLinux Linux KernelSuse Linux Enterprise Live PatchingArista Velocloud Edge

Weakness Type

CWE-669, CWE-1288

References