CVE-2026-31431 Linux Kernel Incorrect Resource Transfer Between Spheres
Reverts in-place operation in algif_aead to fix potential issues, requiring kernel patching for Linux systems.
- Exploited in the wild
- Since 1 May 2026
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-31431?
CVE-2026-31431 is a high-severity vulnerability in Canonical Ubuntu Linux, published on 22 Apr 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of the associated data.
There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
Which versions are affected by CVE-2026-31431?
It affects 48 products.
Linux distribution packages (40)
kernel AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-core AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-debug AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-debug-core AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-debug-devel AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-debug-devel-matched AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-debug-modules AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-debug-modules-core AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-debug-modules-extra AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-debug-modules-internal AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-debug-modules-partner AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-debug-uki-virt AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-debug-uki-virt-addons AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-devel AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-devel-matched AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-modules AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-modules-core AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-modules-extra AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-modules-internal AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-modules-partner AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-uki-virt AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-64k-uki-virt-addons AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-abi-stablelists AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-core AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-cross-headers AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-debug AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-debug-core AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-debug-devel AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-debug-devel-matched AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-debug-modules AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-debug-modules-core AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-debug-modules-extra AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-debug-modules-internal AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-debug-modules-partner AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-debug-uki-virt AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-debug-uki-virt-addons AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-devel AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-devel-matched AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
kernel-doc AlmaLinux:10 | All versions | 6.12.0-124.52.2.el10_1 |
Products include Amazon Amazon Linux, Arista Cloudvision Agni, Arista Cloudvision Portal, Arista Netvisor Os, Arista Velocloud Edge, Arista Velocloud Gateway and 42 more.
How do I fix CVE-2026-31431?
Apply the vendor's patch. US federal agencies must fix it by 15 May 2026.
Is CVE-2026-31431 being exploited?
Yes. Attackers have exploited CVE-2026-31431 in the wild since at least 1 May 2026.
Public exploit code: 1 Metasploit module and 326 proofs of concept on GitHub.
Sources
Also known as ALSA-2026:A001, ALSA-2026:A002, ALSA-2026:A003, AZL-83249, AZL-85706, BELL-CVE-2026-31431 and 50 more.