CVE-2026-31431 · threatengine.sh

Home/CVE/Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

CVE

CVE-2026-31431

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

HIGH · CVSS 7.8 ⚠ CISA KEV EPSS 0.02235

Act now

Listed on CISA KEV (known exploited in the wild)
SSVC exploitation status: active
Public exploit or PoC is available
CVSS base score ≥ 7.0

Sigma rules0 YARA rules1

⬢

Required Remediation

"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

⬡

Weakness Classification

CWE-669Incorrect Resource Transfer Between Spheres

▤

Affected Products & Versions

24

linux kernel>= 4.14 and < 5.10.254
linux kernel>= 5.11 and < 5.15.204
linux kernel>= 5.16 and < 6.1.170
linux kernel>= 6.2 and < 6.6.137
linux kernel>= 6.7 and < 6.12.85
linux kernel>= 6.13 and < 6.18.22
linux kernel>= 6.19 and < 6.19.12
linux kernelall versions
Show all 24 affected productsredhat openshift container platformall versions
redhat enterprise linuxall versions
amazon linuxall versions
canonical ubuntu linuxall versions
debian linuxall versions
opensuse leapall versions
suse caas platformall versions
suse enterprise storageall versions
suse manager proxyall versions
suse manager retail branch serverall versions
suse manager serverall versions
suse openstack cloudall versions
suse openstack cloud crowbarall versions
suse basesystem moduleall versions
suse development tools moduleall versions
suse legacy moduleall versions

⚠

Public Exploits & PoCs

2

poccopy.failcopy.fail

pocwebsec.net · cve-2026-31431-linux-algifaead-page-cache-write-to-root-6...websec.net

▣

Scoring & Timeline

7.8

HIGH · CVSS v3.1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67

View on NVD

Attack Vector

Network Adjacent Local Physical

Attack Complexity

Low High

Privileges Required

None Low High

User Interaction

None Required

Scope

Unchanged Changed

Confidentiality

None Low High

Integrity

None Low High

Availability

None Low High

Published to NVD22 Apr 2026 · 09:16 AM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC triage · cisa-vulnrichment

Exploitation

active

Automatable

no

Technical impact

total

SSVC asks the questions that actually drive patch urgency: is it being exploited, can attacks be automated, and how total is the impact.

⚑

Vendor Advisories

30

aws-security2026-026-aws
aws-security2026-027-aws
usnUSN-8281-1
usnUSN-8280-1
usnUSN-8279-1
Show all 30 vendor advisoriesusnUSN-8278-1
usnUSN-8277-1
rhsaRHSA-2026:19074Important
rhsaRHSA-2026:19225Important
rhsaRHSA-2026:14773Important
rhsaRHSA-2026:15087Important
rhsaRHSA-2026:16209Important
rhsaRHSA-2026:16208Important
rhsaRHSA-2026:16210Important
rhsaRHSA-2026:16018Important
rhsaRHSA-2026:16063Important
rhsaRHSA-2026:15978Important
rhsaRHSA-2026:15976Important
rhsaRHSA-2026:16111Important
suse-csafSUSE-SU-2026:1787-1
suse-csafSUSE-SU-2026:1790-1
suse-csafSUSE-SU-2026:1791-1
suse-csafSUSE-SU-2026:1792-1
suse-csafSUSE-SU-2026:1793-1
suse-csafSUSE-SU-2026:1798-1
suse-csafSUSE-SU-2026:1801-1
suse-csafSUSE-SU-2026:1802-1
suse-csafSUSE-SU-2026:1804-1
rhsaRHSA-2026:14097Important
suse-csafopenSUSE-SU-2026:10734-1

🔗

References & Sources

78

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130cPatch

https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fcPatch

https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667Patch

https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82Patch

https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875bPatch

https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5Patch

Show all 78 references

https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237Patch

https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8Patch

http://www.openwall.com/lists/oss-security/2026/04/29/23ExploitMailing ListPatch

http://www.openwall.com/lists/oss-security/2026/04/29/25Mailing ListPatch

http://www.openwall.com/lists/oss-security/2026/04/29/26ExploitMailing ListPatch

http://www.openwall.com/lists/oss-security/2026/04/30/10Mailing ListPatch

http://www.openwall.com/lists/oss-security/2026/04/30/11Mailing ListPatch

http://www.openwall.com/lists/oss-security/2026/04/30/12Mailing ListPatch

http://www.openwall.com/lists/oss-security/2026/04/30/14Mailing ListPatch

http://www.openwall.com/lists/oss-security/2026/04/30/15Mailing ListPatch

http://www.openwall.com/lists/oss-security/2026/04/30/16Mailing ListPatch

http://www.openwall.com/lists/oss-security/2026/04/30/17Mailing List

http://www.openwall.com/lists/oss-security/2026/04/30/18ExploitMailing List

http://www.openwall.com/lists/oss-security/2026/04/30/2Mailing List

http://www.openwall.com/lists/oss-security/2026/04/30/20Mailing List

http://www.openwall.com/lists/oss-security/2026/04/30/5ExploitMailing ListPatch

http://www.openwall.com/lists/oss-security/2026/04/30/6Mailing List

http://www.openwall.com/lists/oss-security/2026/05/01/10Mailing List

http://www.openwall.com/lists/oss-security/2026/05/01/12Mailing List

http://www.openwall.com/lists/oss-security/2026/05/01/15Mailing List

http://www.openwall.com/lists/oss-security/2026/05/01/16Mailing List

http://www.openwall.com/lists/oss-security/2026/05/01/17Mailing List

http://www.openwall.com/lists/oss-security/2026/05/01/18Mailing List

http://www.openwall.com/lists/oss-security/2026/05/01/2Mailing List

http://www.openwall.com/lists/oss-security/2026/05/01/22Mailing List

http://www.openwall.com/lists/oss-security/2026/05/01/23Mailing List

http://www.openwall.com/lists/oss-security/2026/05/01/24Mailing List

http://www.openwall.com/lists/oss-security/2026/05/01/3Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/14Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/15Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/16Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/17Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/18Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/19Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/20Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/21Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/23Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/24Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/25Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/4Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/5Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/6Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/7Mailing List

http://www.openwall.com/lists/oss-security/2026/05/02/8Mailing List

http://www.openwall.com/lists/oss-security/2026/05/03/10Mailing List

http://www.openwall.com/lists/oss-security/2026/05/03/12Mailing List

http://www.openwall.com/lists/oss-security/2026/05/03/13Mailing List

http://www.openwall.com/lists/oss-security/2026/05/03/3Mailing List

http://www.openwall.com/lists/oss-security/2026/05/03/4Mailing List

http://www.openwall.com/lists/oss-security/2026/05/03/5Mailing List

http://www.openwall.com/lists/oss-security/2026/05/03/6Mailing List

http://www.openwall.com/lists/oss-security/2026/05/04/1Mailing List

http://www.openwall.com/lists/oss-security/2026/05/04/10Mailing List

http://www.openwall.com/lists/oss-security/2026/05/04/11Mailing List

http://www.openwall.com/lists/oss-security/2026/05/04/12Mailing List

http://www.openwall.com/lists/oss-security/2026/05/04/13Mailing List

http://www.openwall.com/lists/oss-security/2026/05/04/14Mailing List

http://www.openwall.com/lists/oss-security/2026/05/04/2Mailing List

http://www.openwall.com/lists/oss-security/2026/05/04/24Mailing List

http://www.openwall.com/lists/oss-security/2026/05/04/27Mailing List

http://www.openwall.com/lists/oss-security/2026/05/04/28Mailing List

http://www.openwall.com/lists/oss-security/2026/05/04/29Mailing List

http://www.openwall.com/lists/oss-security/2026/05/04/31Mailing List

http://www.openwall.com/lists/oss-security/2026/05/04/8Mailing List

http://www.openwall.com/lists/oss-security/2026/05/04/9Mailing List

http://www.openwall.com/lists/oss-security/2026/05/06/5Mailing List

http://www.openwall.com/lists/oss-security/2026/05/07/12Mailing List

http://www.openwall.com/lists/oss-security/2026/05/07/2Mailing List

http://www.openwall.com/lists/oss-security/2026/05/08/13Mailing List

http://www.openwall.com/lists/oss-security/2026/05/18/3Mailing List

https://www.kb.cert.org/vuls/id/260001Third Party Advisory

https://access.redhat.com/security/cve/cve-2026-31431#cve-details-mitigationThird Party Advisory

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin