CVE-2026-31431

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 7.8EPSS 3%

Published 2026-04-22Updated 2026-05-01

Exploited in the wildMedia 8975725PoC

Vulnerability details

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CNALinux

EPSS score history

Sources

80 links

PoC links are not available for guest users. Login to view them.

CISA Known Exploited CVEShield Unit42 VulnCheck KEV CVE Organization RedHat Vuln DB The Register The Hacker News HelpNetSecurity HelpNetSecurity Bleeping Computer Tenable Blog Tenable Blog HelpNetSecurity HelpNetSecurity HelpNetSecurity HelpNetSecurity HelpNetSecurity Wiz Blog NVD Analysis Wired Security EUVD Wired Security The Hacker News HelpNetSecurity HelpNetSecurity HelpNetSecurity HelpNetSecurity HelpNetSecurity HelpNetSecurity HelpNetSecurity HelpNetSecurity HelpNetSecurity Bleeping Computer Wiz Blog Wiz Blog Wiz Blog Wiz Blog HelpNetSecurity HelpNetSecurity The Hacker News ZDNet The Register Unit42 Unit42 Wired Security Wired Security HelpNetSecurity The Hacker News Wiz Blog HelpNetSecurity Tenable Blog Qualys Blog Wired Security Wired Security HelpNetSecurity Wired Security Wired Security The Hacker News Wired Security Tenable Blog Wired Security The Hacker News Wired Security Wired Security Wired Security Wired Security Wired Security Unit42 The Hacker News The Hacker News The Hacker News The Hacker News Bleeping Computer Unit42 The Hacker News CrowdStrike Blog Unit42 Unit42 ZDNet

Profile

CVSS

7.8

EPSS

Published

2026-04-22

Updated

2026-05-01

CNA

Linux

Vendors

Linux

1 product

CPEs

cpe:/a:redhat:enterprise_linux_nvidia:10::el10

cpe:/a:redhat:openshift:4.12::el8

cpe:/a:redhat:openshift:4.13::el9

cpe:/a:redhat:openshift:4.14::el9

cpe:/a:redhat:openshift:4.15::el9

cpe:/a:redhat:openshift:4.16::el9

cpe:/a:redhat:openshift:4.17::el9

cpe:/a:redhat:openshift:4.18::el9

cpe:/a:redhat:openshift:4.19::el9

cpe:/a:redhat:openshift:4.20::el9

cpe:/a:redhat:openshift:4.21::el9

cpe:/o:redhat:enterprise_linux_eus:10.0

cpe:/o:redhat:enterprise_linux:10.1

cpe:/o:redhat:enterprise_linux:10.2

cpe:/a:redhat:rhel_e4s:9.0::appstream

cpe:/a:redhat:rhel_e4s:9.2::appstream

cpe:/a:redhat:rhel_eus:9.4::appstream

cpe:/a:redhat:rhel_eus:9.6::appstream

cpe:/a:redhat:enterprise_linux:9::appstream

cpe:/o:redhat:enterprise_linux:8::baseos

cpe:/o:redhat:rhel_aus:8.4::baseos

cpe:/o:redhat:rhel_eus_long_life:8.4::baseos

cpe:/o:redhat:rhel_aus:8.6::baseos

cpe:/o:redhat:rhel_e4s:8.6::baseos

cpe:/o:redhat:rhel_tus:8.6::baseos

cpe:/o:redhat:rhel_e4s:8.8::baseos

cpe:/o:redhat:rhel_tus:8.8::baseos

cpe:/o:redhat:rhel_e4s:9.0::baseos

cpe:/o:redhat:rhel_e4s:9.2::baseos

cpe:/o:redhat:rhel_eus:9.4::baseos

cpe:/o:redhat:rhel_eus:9.6::baseos

cpe:/o:redhat:enterprise_linux:9::baseos

cpe:/a:redhat:enterprise_linux:8::crb

cpe:/a:redhat:rhel_eus:9.4::crb

cpe:/a:redhat:rhel_eus:9.6::crb

cpe:/a:redhat:enterprise_linux:9::crb

cpe:/a:redhat:enterprise_linux:8::nfv

cpe:/a:redhat:rhel_e4s:9.0::nfv

cpe:/a:redhat:rhel_e4s:9.2::nfv

cpe:/a:redhat:rhel_eus:9.4::nfv

cpe:/a:redhat:rhel_eus:9.6::nfv

cpe:/a:redhat:enterprise_linux:9::nfv

cpe:/a:redhat:enterprise_linux:8::realtime

cpe:/a:redhat:rhel_e4s:9.0::realtime

cpe:/a:redhat:rhel_e4s:9.2::realtime

cpe:/a:redhat:rhel_eus:9.4::realtime

cpe:/a:redhat:rhel_eus:9.6::realtime

cpe:/a:redhat:enterprise_linux:9::realtime

cpe:/o:redhat:enterprise_linux:6

cpe:/o:redhat:enterprise_linux:7

cpe:/o:redhat:enterprise_linux:8

cpe:/o:redhat:rhel_aus:8.4

cpe:/o:redhat:rhel_eus_long_life:8.4

cpe:/o:redhat:rhel_aus:8.6

cpe:/o:redhat:rhel_tus:8.6

cpe:/o:redhat:rhel_e4s:8.6

cpe:/o:redhat:rhel_tus:8.8

cpe:/o:redhat:rhel_e4s:8.8

cpe:/a:redhat:enterprise_linux:9

cpe:/o:redhat:enterprise_linux:9

cpe:/a:redhat:rhel_e4s:9.0

cpe:/o:redhat:rhel_e4s:9.0

cpe:/a:redhat:rhel_e4s:9.2

cpe:/o:redhat:rhel_e4s:9.2

cpe:/a:redhat:rhel_eus:9.4

cpe:/o:redhat:rhel_eus:9.4

cpe:/a:redhat:rhel_eus:9.6

cpe:/o:redhat:rhel_eus:9.6

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated