Description
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to < 893d22e0135fa394db81df88697fba6032747667affected72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to < 19d43105a97be0810edbda875f2cd03f30dc130caffected72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to < 961cfa271a918ad4ae452420e7c303149002875baffected72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to < 3115af9644c342b356f3f07a4dd1c8905cd9a6fcaffected72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to < 8b88d99341f139e23bdeb1027a2a3ae10d341d82affected72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to < fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8affected72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to < ce42ee423e58dffa5ec03524054c9d8bfd4f6237affected72548b093ee38a6d4f2a19e6ef1948ae05c181f7 to < a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5affected
Linux Linux
Default version status: affected
4.14affected0 to < 4.14unaffected5.10.254 to ≤ 5.10.*unaffected5.15.204 to ≤ 5.15.*unaffected6.1.170 to ≤ 6.1.*unaffected6.6.137 to ≤ 6.6.*unaffected6.12.85 to ≤ 6.12.*unaffected6.18.22 to ≤ 6.18.*unaffected6.19.12 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667 ↗
- https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c ↗
- https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b ↗
- https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc ↗
- https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82 ↗
- https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8 ↗
- https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237 ↗
- https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5 ↗
- https://github.com/theori-io/copy-fail-CVE-2026-31431 ↗
- https://xint.io/blog/copy-fail-linux-distributions#the-fix-6 ↗
- https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/ ↗
- https://access.redhat.com/security/cve/cve-2026-31431#cve-details-mitigation ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-31431 ↗
- http://www.openwall.com/lists/oss-security/2026/04/29/23 ↗
- https://copy.fail ↗
- http://www.openwall.com/lists/oss-security/2026/04/29/25 ↗
- http://www.openwall.com/lists/oss-security/2026/04/29/26 ↗
- http://www.openwall.com/lists/oss-security/2026/04/30/2 ↗
- http://www.openwall.com/lists/oss-security/2026/04/30/5 ↗
- http://www.openwall.com/lists/oss-security/2026/04/30/6 ↗
- http://www.openwall.com/lists/oss-security/2026/04/30/10 ↗
- http://www.openwall.com/lists/oss-security/2026/04/30/11 ↗
- http://www.openwall.com/lists/oss-security/2026/04/30/12 ↗
- http://www.openwall.com/lists/oss-security/2026/04/30/14 ↗
- http://www.openwall.com/lists/oss-security/2026/04/30/15 ↗
- http://www.openwall.com/lists/oss-security/2026/04/30/16 ↗
- http://www.openwall.com/lists/oss-security/2026/04/30/17 ↗
- http://www.openwall.com/lists/oss-security/2026/04/30/18 ↗
- https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170 ↗
- http://www.openwall.com/lists/oss-security/2026/04/30/20 ↗
- http://www.openwall.com/lists/oss-security/2026/05/01/2 ↗
- http://www.openwall.com/lists/oss-security/2026/05/01/3 ↗
- http://www.openwall.com/lists/oss-security/2026/05/01/10 ↗
- http://www.openwall.com/lists/oss-security/2026/05/01/12 ↗
- http://www.openwall.com/lists/oss-security/2026/05/01/15 ↗
- http://www.openwall.com/lists/oss-security/2026/05/01/16 ↗
- http://www.openwall.com/lists/oss-security/2026/05/01/17 ↗
- http://www.openwall.com/lists/oss-security/2026/05/01/18 ↗
- http://www.openwall.com/lists/oss-security/2026/05/01/22 ↗
- http://www.openwall.com/lists/oss-security/2026/05/01/23 ↗
- http://www.openwall.com/lists/oss-security/2026/05/01/24 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/4 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/5 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/6 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/7 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/8 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/14 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/15 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/16 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/17 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/18 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/19 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/20 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/21 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/23 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/24 ↗
- http://www.openwall.com/lists/oss-security/2026/05/02/25 ↗
- http://www.openwall.com/lists/oss-security/2026/05/03/3 ↗
- http://www.openwall.com/lists/oss-security/2026/05/03/4 ↗
- http://www.openwall.com/lists/oss-security/2026/05/03/10 ↗
- http://www.openwall.com/lists/oss-security/2026/05/03/5 ↗
- http://www.openwall.com/lists/oss-security/2026/05/03/6 ↗
- http://www.openwall.com/lists/oss-security/2026/05/03/12 ↗
- http://www.openwall.com/lists/oss-security/2026/05/03/13 ↗
- http://www.openwall.com/lists/oss-security/2026/05/04/1 ↗
- http://www.openwall.com/lists/oss-security/2026/05/04/2 ↗
- http://www.openwall.com/lists/oss-security/2026/05/04/10 ↗
- http://www.openwall.com/lists/oss-security/2026/05/04/11 ↗
- http://www.openwall.com/lists/oss-security/2026/05/04/12 ↗
- http://www.openwall.com/lists/oss-security/2026/05/04/13 ↗
- http://www.openwall.com/lists/oss-security/2026/05/04/14 ↗
- http://www.openwall.com/lists/oss-security/2026/05/04/8 ↗
- http://www.openwall.com/lists/oss-security/2026/05/04/9 ↗
- http://www.openwall.com/lists/oss-security/2026/05/04/24 ↗
- http://www.openwall.com/lists/oss-security/2026/05/04/27 ↗
- http://www.openwall.com/lists/oss-security/2026/05/04/28 ↗
- http://www.openwall.com/lists/oss-security/2026/05/04/29 ↗
- http://www.openwall.com/lists/oss-security/2026/05/04/31 ↗
- http://www.openwall.com/lists/oss-security/2026/05/06/5 ↗
- http://www.openwall.com/lists/oss-security/2026/05/07/2 ↗
- http://www.openwall.com/lists/oss-security/2026/05/07/12 ↗
- http://www.openwall.com/lists/oss-security/2026/05/08/13 ↗
- https://www.kb.cert.org/vuls/id/260001 ↗
- http://www.openwall.com/lists/oss-security/2026/05/18/3 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-328642.html ↗
- https://access.redhat.com/security/cve/CVE-2026-31431 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2460538 ↗
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31431.json ↗
- https://access.redhat.com/errata/RHSA-2026:14926 ↗
- https://access.redhat.com/errata/RHSA-2026:33486 ↗
- https://access.redhat.com/errata/RHSA-2026:14097 ↗
- https://access.redhat.com/errata/RHSA-2026:14112 ↗
- https://access.redhat.com/errata/RHSA-2026:15087 ↗
- https://access.redhat.com/errata/RHSA-2026:14773 ↗
- https://access.redhat.com/errata/RHSA-2026:13729 ↗
- https://access.redhat.com/errata/RHSA-2026:13885 ↗
- https://access.redhat.com/errata/RHSA-2026:13727 ↗
- https://access.redhat.com/errata/RHSA-2026:13690 ↗
- https://access.redhat.com/errata/RHSA-2026:13862 ↗
- https://access.redhat.com/errata/RHSA-2026:13811 ↗
- https://access.redhat.com/errata/RHSA-2026:13887 ↗
- https://access.redhat.com/errata/RHSA-2026:13566 ↗
- https://access.redhat.com/errata/RHSA-2026:19074 ↗
- https://access.redhat.com/errata/RHSA-2026:13936 ↗
- https://access.redhat.com/errata/RHSA-2026:13734 ↗
- https://access.redhat.com/errata/RHSA-2026:13932 ↗
- https://access.redhat.com/errata/RHSA-2026:14339 ↗
- https://access.redhat.com/errata/RHSA-2026:13565 ↗
- https://access.redhat.com/errata/RHSA-2026:19225 ↗
- https://access.redhat.com/errata/RHSA-2026:13577 ↗
- https://access.redhat.com/errata/RHSA-2026:15976 ↗
- https://access.redhat.com/errata/RHSA-2026:14165 ↗
- https://access.redhat.com/errata/RHSA-2026:14230 ↗
- https://access.redhat.com/errata/RHSA-2026:16111 ↗
- https://access.redhat.com/errata/RHSA-2026:13681 ↗
- https://access.redhat.com/errata/RHSA-2026:16210 ↗
- https://access.redhat.com/errata/RHSA-2026:16209 ↗
- https://access.redhat.com/errata/RHSA-2026:16208 ↗
- https://access.redhat.com/errata/RHSA-2026:16063 ↗
- https://access.redhat.com/errata/RHSA-2026:16018 ↗
- https://access.redhat.com/errata/RHSA-2026:15978 ↗
- https://access.redhat.com/errata/RHSA-2026:13578 ↗
- https://access.redhat.com/errata/RHSA-2026:14137 ↗
- https://access.redhat.com/errata/RHSA-2026:14301 ↗