← All CVEs

CVE-2026-31431

high · 7.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Added 2026-05-01Remediation due 2026-05-15

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

7.8
CVSS
99.9%
EPSS (exploit prob.)
100th
EPSS percentile
2026-04-22
Published

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-669CWE-1288

Affected products

VendorProductAffected versions
linuxlinux_kernel>= 4.14, < 5.10.254
linuxlinux_kernel>= 5.11, < 5.15.204
linuxlinux_kernel>= 5.16, < 6.1.170
linuxlinux_kernel>= 6.2, < 6.6.137
linuxlinux_kernel>= 6.7, < 6.12.85
linuxlinux_kernel>= 6.13, < 6.18.22
linuxlinux_kernel>= 6.19, < 6.19.12
linuxlinux_kernel7.0
linuxlinux_kernel7.0
linuxlinux_kernel7.0
linuxlinux_kernel7.0
linuxlinux_kernel7.0
linuxlinux_kernel7.0
redhatopenshift_container_platform>= 4.12, < 4.12.89
redhatopenshift_container_platform>= 4.13, < 4.13.66
redhatopenshift_container_platform>= 4.14, < 4.14.65
redhatopenshift_container_platform>= 4.15, < 4.15.64
redhatopenshift_container_platform>= 4.16, < 4.16.61
redhatopenshift_container_platform>= 4.17, < 4.17.53
redhatopenshift_container_platform>= 4.18, < 4.18.40
redhatopenshift_container_platform>= 4.19, < 4.19.30
redhatopenshift_container_platform>= 4.20, < 4.20.21
redhatopenshift_container_platform>= 4.21, < 4.21.14
redhatopenshift_container_platform4.0
redhatenterprise_linux8.0
redhatenterprise_linux9.0
redhatenterprise_linux10.0
redhatenterprise_linux_aus8.4
redhatenterprise_linux_aus8.6
redhatenterprise_linux_eus8.4
redhatenterprise_linux_eus9.4
redhatenterprise_linux_eus9.6
redhatenterprise_linux_eus10.0
redhatenterprise_linux_tus8.6
redhatenterprise_linux_tus8.8
redhatenterprise_linux_update_services_for_sap_solutions8.6
redhatenterprise_linux_update_services_for_sap_solutions8.8
redhatenterprise_linux_update_services_for_sap_solutions9.0
redhatenterprise_linux_update_services_for_sap_solutions9.2
amazonamazon_linuxall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-31431