ISOMAN

CVE

CVE-2026-31431

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Severity
HIGH
CVSS
7.8
Published
Modified

Linked Releases

DistributionReleaseStatusEvidence
Debian13.5.0 amd64 netinstunknownsource
Debian13.5.0 amd64 edu netinstunknownsource
Debian13.5.0 amd64 mac netinstunknownsource
Debian13.5.0 arm64 netinstunknownsource
Debian13.5.0 amd64 dvd-1unknownsource
Debian13.5.0 arm64 dvd-1unknownsource
Debian13.5.0 amd64 live gnomeunknownsource
Debian13.5.0 amd64 live kdeunknownsource
Debian13.5.0 amd64 live cinnamonunknownsource
Debian13.5.0 amd64 live lxdeunknownsource
Debian13.5.0 amd64 live lxqtunknownsource
Debian13.5.0 amd64 live mateunknownsource
Debian13.5.0 amd64 live xfceunknownsource
Debian13.5.0 amd64 live standardunknownsource
Debian13.5.0 amd64 live debian-juniorunknownsource
Ubuntu24.04.4 amd64 desktopunknownsource
Ubuntu24.04.4 amd64 live-serverunknownsource
Ubuntu24.04.3 amd64 live-serverunknownsource
Ubuntu22.04.5 amd64 desktopunknownsource
Ubuntu22.04.5 amd64 live-serverunknownsource
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource
Ubuntu24.04 amd64 beta-desktopunknownsource
Ubuntu24.04 amd64 beta-live-serverunknownsource
Ubuntu24.04unknownsource
Ubuntu24.04 arm64 beta-live-serverunknownsource
Ubuntu24.04 ppc64el beta-live-serverunknownsource
Ubuntu24.04 riscv64unknownsource
Ubuntu24.04 s390x beta-live-serverunknownsource
Ubuntu24.04 amd64 desktopunknownsource
Ubuntu24.04 amd64 live-serverunknownsource
Ubuntu24.04 arm64 live-serverunknownsource
Ubuntu24.04 ppc64el live-serverunknownsource
Ubuntu24.04 s390x live-serverunknownsource
Ubuntu24.04.1 amd64 desktopunknownsource
Ubuntu24.04.1 amd64 live-serverunknownsource
Ubuntu24.04.1unknownsource
Ubuntu24.04.1 arm64 live-serverunknownsource
Ubuntu24.04.1 ppc64el live-serverunknownsource
Ubuntu24.04.1 riscv64unknownsource
Ubuntu24.04.1 s390x live-serverunknownsource
Ubuntu24.04.2 amd64 desktopunknownsource
Ubuntu24.04.2 amd64 live-serverunknownsource
Ubuntu24.04.2unknownsource
Ubuntu24.04.2 arm64 live-serverunknownsource
Ubuntu24.04.2 ppc64el live-serverunknownsource
Ubuntu24.04.2 riscv64unknownsource
Ubuntu24.04.2 s390x live-serverunknownsource
openSUSE Leap15.6 aarch64 leap dvdunknownsource
openSUSE Leap15.6 ppc64le leap dvdunknownsource
openSUSE Leap15.6 s390x leap dvdunknownsource
openSUSE Leap15.6 x86_64 leap dvdunknownsource
openSUSE Leap15.6 aarch64 leap netunknownsource
openSUSE Leap15.6 ppc64le leap netunknownsource
openSUSE Leap15.6 s390x leap netunknownsource
openSUSE Leap15.6 x86_64 leap netunknownsource
Debian13.5.0 armhf netinstunknownsource
Debian13.5.0 ppc64el netinstunknownsource
Debian13.5.0 riscv64 netinstunknownsource
Debian13.5.0 s390x netinstunknownsource
Debian13.5.0 armhf dvd-1unknownsource
Debian13.5.0 ppc64el dvd-1unknownsource
Debian13.5.0 riscv64 dvd-1unknownsource
Debian13.5.0 s390x dvd-1unknownsource
Debian13.6.0 amd64 netinstunknownsource
Debian13.6.0 amd64 edu netinstunknownsource
Debian13.6.0 amd64 mac netinstunknownsource
Debian13.6.0 arm64 netinstunknownsource
Debian13.6.0 amd64 dvd-1unknownsource
Debian13.6.0 arm64 dvd-1unknownsource
Debian13.6.0 amd64 live gnomeunknownsource
Debian13.6.0 amd64 live kdeunknownsource
Debian13.6.0 amd64 live cinnamonunknownsource
Debian13.6.0 amd64 live lxdeunknownsource
Debian13.6.0 amd64 live lxqtunknownsource
Debian13.6.0 amd64 live mateunknownsource
Debian13.6.0 amd64 live xfceunknownsource
Debian13.6.0 amd64 live standardunknownsource
Debian13.6.0 amd64 live debian-juniorunknownsource
Debian13.6.0 armhf netinstunknownsource
Debian13.6.0 ppc64el netinstunknownsource
Debian13.6.0 riscv64 netinstunknownsource
Debian13.6.0 s390x netinstunknownsource
Debian13.6.0 armhf dvd-1unknownsource
Debian13.6.0 ppc64el dvd-1unknownsource
Debian13.6.0 riscv64 dvd-1unknownsource
Debian13.6.0 s390x dvd-1unknownsource

References

  1. https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c
  2. https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc
  3. https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667
  4. https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82
  5. https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b
  6. https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5
  7. https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237
  8. https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8
  9. http://www.openwall.com/lists/oss-security/2026/04/29/23
  10. http://www.openwall.com/lists/oss-security/2026/04/29/25
  11. http://www.openwall.com/lists/oss-security/2026/04/29/26
  12. http://www.openwall.com/lists/oss-security/2026/04/30/10
  13. http://www.openwall.com/lists/oss-security/2026/04/30/11
  14. http://www.openwall.com/lists/oss-security/2026/04/30/12
  15. http://www.openwall.com/lists/oss-security/2026/04/30/14
  16. http://www.openwall.com/lists/oss-security/2026/04/30/15
  17. http://www.openwall.com/lists/oss-security/2026/04/30/16
  18. http://www.openwall.com/lists/oss-security/2026/04/30/17
  19. http://www.openwall.com/lists/oss-security/2026/04/30/18
  20. http://www.openwall.com/lists/oss-security/2026/04/30/2