Is CVE-2026-31431 being actively exploited?

Yes. CVE-2026-31431 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added on May 1, 2026.

What is the CVSS score for CVE-2026-31431?

CVE-2026-31431 has a CVSS 3.1 base score of 7.8 (HIGH).

CVE-2026-31431

HIGH · CVSS 7.8CISA KEV: actively exploitedEPSS 3.4%EU EUVD: exploited

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Key facts

CVSS score: 7.8 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-669
EPSS score: 3.4% (89th percentile)
In CISA KEV: Yes, added May 1, 2026
In EU EUVD: Yes (EUVD-2026-24639)
Published: April 22, 2026
NVD last modified: September 8, 2026
Status: Analyzed

CISA Known Exploited Vulnerability

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Added to the KEV catalog on May 1, 2026; federal remediation due May 15, 2026.

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2026-24639 in the EU Vulnerability Database. ENISA flags it as known exploited. Last updated in EUVD on October 15, 2026.

View on the EU Vulnerability Database

Affected products

amazon / amazon linux
arista / cloudvision agni
arista / cloudvision portal
arista / netvisor os
arista / netvisor os
arista / netvisor os
arista / velocloud edge
arista / velocloud gateway
arista / velocloud orchestrator
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
debian / debian linux
debian / debian linux
debian / debian linux
linux / linux kernel
linux / linux kernel
linux / linux kernel
linux / linux kernel
linux / linux kernel
linux / linux kernel
linux / linux kernel
nixos / nixos
opensuse / leap
opensuse / leap
opensuse / leap
opensuse / leap
redhat / enterprise linux
redhat / enterprise linux
redhat / enterprise linux
redhat / enterprise linux aus
redhat / enterprise linux aus
redhat / enterprise linux eus
redhat / enterprise linux eus
redhat / enterprise linux eus
redhat / enterprise linux eus
redhat / enterprise linux tus
redhat / enterprise linux tus
redhat / enterprise linux update services for sap solutions
redhat / enterprise linux update services for sap solutions
redhat / enterprise linux update services for sap solutions
redhat / enterprise linux update services for sap solutions
redhat / openshift container platform
redhat / openshift container platform
siemens / simatic ax runtime

and 154 more…

Certified products that may be affected

43 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Red Hat Enterprise Linux 8 NSS Cryptographic Module - Red Hat, Inc. - FIPS 140 5513 - active
Red Hat Enterprise Linux 8 Kernel Cryptographic API - Red Hat, LLC - FIPS 140 5461 - active
Red Hat Enterprise Linux 9 Kernel Cryptographic API - Red Hat, Inc. - FIPS 140 5445 - active
Red Hat Enterprise Linux 9 libgcrypt - Red Hat, Inc. - FIPS 140 5366 - active
SUSE Linux Enterprise Server, Version 15 SP7 - SUSE LLC - Common Criteria BSI-DSZ-CC-1230-2026 - active

See all 43 in the Security Certifications Explorer.

References

http://www.openwall.com/lists/oss-security/2026/04/29/23(Exploit, Mailing List, Patch)
http://www.openwall.com/lists/oss-security/2026/04/29/25(Mailing List, Patch)
http://www.openwall.com/lists/oss-security/2026/04/29/26(Exploit, Mailing List, Patch)
http://www.openwall.com/lists/oss-security/2026/04/30/10(Mailing List, Patch)
http://www.openwall.com/lists/oss-security/2026/04/30/11(Mailing List, Patch)
http://www.openwall.com/lists/oss-security/2026/04/30/12(Mailing List, Patch)
http://www.openwall.com/lists/oss-security/2026/04/30/14(Mailing List, Patch)
http://www.openwall.com/lists/oss-security/2026/04/30/15(Mailing List, Patch)
http://www.openwall.com/lists/oss-security/2026/04/30/16(Mailing List, Patch)
http://www.openwall.com/lists/oss-security/2026/04/30/17(Mailing List)
http://www.openwall.com/lists/oss-security/2026/04/30/18(Exploit, Mailing List)
http://www.openwall.com/lists/oss-security/2026/04/30/2(Mailing List)
http://www.openwall.com/lists/oss-security/2026/04/30/20(Mailing List)
http://www.openwall.com/lists/oss-security/2026/04/30/5(Exploit, Mailing List, Patch)
http://www.openwall.com/lists/oss-security/2026/04/30/6(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/01/10(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/01/12(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/01/15(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/01/16(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/01/17(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/01/18(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/01/2(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/01/22(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/01/23(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/01/24(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/01/3(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/02/14(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/02/15(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/02/16(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/02/17(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/02/18(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/02/19(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/02/20(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/02/21(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/02/23(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/02/24(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/02/25(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/02/4(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/02/5(Mailing List)
http://www.openwall.com/lists/oss-security/2026/05/02/6(Mailing List)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain