Actively exploited in the wild
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
Linux - Kernel · Listed in the CISA KEV since 2026-05-01. This indicates confirmed attacks in production environments.
Required action: "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2026-31431
HighCVSS 7.8KEVExploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
A vulnerability was found in the Linux kernel's AEAD algorithm implementation via the algorithmic interface (algif_aead). It involves incorrect in-place operation, which may cause data processing errors. The patch reverts to out-of-place operation and simplifies the code.
Risk Assessment
The risk for the organization is potential integrity violation of encrypted data processed by applications using the AF_ALG interface in the Linux kernel. This could lead to incorrect decryption or data loss.
Recommendation
It is recommended to immediately update the Linux kernel to a version containing the fix (commit reverting 72548b093ee3). Monitor official security advisories from your Linux distribution.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.