Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-31431 Details

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: redhat-SADPCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://access.redhat.com/errata/RHSA-2026:13565	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:13566	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:13577	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:13578	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:13681	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:13690	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:13727	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:13729	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:13734	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:13811	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:13862	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:13885	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:13887	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:13932	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:13936	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:14097	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:14112	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:14137	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:14165	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:14230	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:14301	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:14339	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:14773	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:14926	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:15087	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:15976	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:15978	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:16018	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:16063	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:16111	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:16208	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:16209	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:16210	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:19074	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:19225	redhat-SADP	Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:33486	redhat-SADP	Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-31431	redhat-SADP	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460538	redhat-SADP	Issue TrackingThird Party Advisory
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31431.json	redhat-SADP	Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-019113.html	siemens-SADP	Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-082556.html	siemens-SADP	Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-265688.html	siemens-SADP	Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-328642.html	siemens-SADP	Third Party Advisory
https://access.redhat.com/security/cve/cve-2026-31431#cve-details-mitigation	CISA-ADP	Third Party Advisory
https://github.com/theori-io/copy-fail-CVE-2026-31431	CISA-ADP	Exploit
https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/	CISA-ADP	Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-31431	CISA-ADP	US Government Resource
https://xint.io/blog/copy-fail-linux-distributions#the-fix-6	CISA-ADP	ExploitPatchThird Party Advisory
https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c	kernel.org	Patch
https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc	kernel.org	Patch
https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667	kernel.org	Patch
https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82	kernel.org	Patch
https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b	kernel.org	Patch
https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5	kernel.org	Patch
https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237	kernel.org	Patch
https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8	kernel.org	Patch
https://copy.fail	CVE	Exploit
https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170	CVE	ExploitThird Party Advisory
https://www.kb.cert.org/vuls/id/260001	CVE	Third Party Advisory
http://www.openwall.com/lists/oss-security/2026/04/29/23	CVE	ExploitMailing ListPatch
http://www.openwall.com/lists/oss-security/2026/04/29/25	CVE	Mailing ListPatch
http://www.openwall.com/lists/oss-security/2026/04/29/26	CVE	ExploitMailing ListPatch
http://www.openwall.com/lists/oss-security/2026/04/30/10	CVE	Mailing ListPatch
http://www.openwall.com/lists/oss-security/2026/04/30/11	CVE	Mailing ListPatch
http://www.openwall.com/lists/oss-security/2026/04/30/12	CVE	Mailing ListPatch
http://www.openwall.com/lists/oss-security/2026/04/30/14	CVE	Mailing ListPatch
http://www.openwall.com/lists/oss-security/2026/04/30/15	CVE	Mailing ListPatch
http://www.openwall.com/lists/oss-security/2026/04/30/16	CVE	Mailing ListPatch
http://www.openwall.com/lists/oss-security/2026/04/30/17	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/04/30/18	CVE	ExploitMailing List
http://www.openwall.com/lists/oss-security/2026/04/30/2	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/04/30/20	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/04/30/5	CVE	ExploitMailing ListPatch
http://www.openwall.com/lists/oss-security/2026/04/30/6	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/01/10	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/01/12	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/01/15	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/01/16	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/01/17	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/01/18	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/01/2	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/01/22	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/01/23	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/01/24	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/01/3	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/14	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/15	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/16	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/17	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/18	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/19	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/20	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/21	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/23	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/24	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/25	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/4	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/5	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/6	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/7	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/02/8	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/03/10	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/03/12	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/03/13	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/03/3	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/03/4	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/03/5	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/03/6	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/04/1	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/04/10	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/04/11	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/04/12	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/04/13	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/04/14	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/04/2	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/04/24	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/04/27	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/04/28	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/04/29	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/04/31	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/04/8	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/04/9	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/06/5	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/07/12	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/07/2	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/08/13	CVE	Mailing List
http://www.openwall.com/lists/oss-security/2026/05/18/3	CVE	Mailing List

see all 127 references

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability Name	Date Added	Due Date	Required Action
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability	May 1, 2026	May 15, 2026	"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-1288	Improper Validation of Consistency within Input	redhat-SADP
CWE-669	Incorrect Resource Transfer Between Spheres	CISA-ADP

Affected Products

Product	Versions
linux linux kernel	>= 4.14, < 5.10.254 >= 5.11, < 5.15.204 >= 5.16, < 6.1.170 >= 6.2, < 6.6.137 >= 6.7, < 6.12.85
CPE cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:7.0:rc1:::::: cpe:2.3:o:linux:linux_kernel:7.0:rc2:::::: cpe:2.3:o:linux:linux_kernel:7.0:rc3:::::: cpe:2.3:o:linux:linux_kernel:7.0:rc4:::::: cpe:2.3:o:linux:linux_kernel:7.0:rc5:::::: cpe:2.3:o:linux:linux_kernel:7.0:rc6:::::: Remediation No remediation found in references.
redhat openshift container platform	>= 4.12, < 4.12.89 >= 4.13, < 4.13.66 >= 4.14, < 4.14.65 >= 4.15, < 4.15.64 >= 4.16, < 4.16.61
CPE cpe:2.3:a:redhat:openshift_container_platform:::::::: cpe:2.3:a:redhat:openshift_container_platform:4.0:::::::* Remediation No remediation found in references.
redhat enterprise linux	8.0 9.0 10.0
CPE cpe:2.3:o:redhat:enterprise_linux:8.0:::::::* cpe:2.3:o:redhat:enterprise_linux:9.0:::::::* cpe:2.3:o:redhat:enterprise_linux:10.0:::::::* Remediation No remediation found in references.
redhat enterprise linux aus	8.4 8.6
CPE cpe:2.3:o:redhat:enterprise_linux_aus:8.4:::::::* cpe:2.3:o:redhat:enterprise_linux_aus:8.6:::::::* Remediation No remediation found in references.
redhat enterprise linux eus	8.4 9.4 9.6 10.0
CPE cpe:2.3:o:redhat:enterprise_linux_eus:8.4:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:9.4:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:9.6:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:10.0:::::::* Remediation No remediation found in references.
redhat enterprise linux tus	8.6 8.8
CPE cpe:2.3:o:redhat:enterprise_linux_tus:8.6:::::::* cpe:2.3:o:redhat:enterprise_linux_tus:8.8:::::::* Remediation No remediation found in references.
redhat enterprise linux update services for sap solutions	8.6 8.8 9.0 9.2
CPE cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:::::::* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:::::::* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:::::::* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:::::::* Remediation No remediation found in references.
amazon amazon linux	All versions
CPE cpe:2.3:o:amazon:amazon_linux:-:::::::* Remediation No remediation found in references.
canonical ubuntu linux	14.04 16.04 18.04 20.04 22.04
CPE cpe:2.3:o:canonical:ubuntu_linux:-:::::::* cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:20.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:22.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:24.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:25.10::::-::: Remediation No remediation found in references.
debian debian linux	11.0 12.0 13.0
CPE cpe:2.3:o:debian:debian_linux:11.0:::::::* cpe:2.3:o:debian:debian_linux:12.0:::::::* cpe:2.3:o:debian:debian_linux:13.0:::::::* Remediation No remediation found in references.
opensuse leap	15.3 15.4 15.5 15.6
CPE cpe:2.3:o:opensuse:leap:15.3:::::::* cpe:2.3:o:opensuse:leap:15.4:::::::* cpe:2.3:o:opensuse:leap:15.5:::::::* cpe:2.3:o:opensuse:leap:15.6:::::::* Remediation No remediation found in references.
suse caas platform	4.0
CPE cpe:2.3:a:suse:caas_platform:4.0:::::::* Remediation No remediation found in references.
suse enterprise storage	6.0 7.0 7.1
CPE cpe:2.3:a:suse:enterprise_storage:6.0:::::::* cpe:2.3:a:suse:enterprise_storage:7.0:::::::* cpe:2.3:a:suse:enterprise_storage:7.1:::::::* Remediation No remediation found in references.
suse manager proxy	4.0 4.1 4.2 4.3
CPE cpe:2.3:a:suse:manager_proxy:4.0:::::::* cpe:2.3:a:suse:manager_proxy:4.1:::::::* cpe:2.3:a:suse:manager_proxy:4.2:::::::* cpe:2.3:a:suse:manager_proxy:4.3:::::::* Remediation No remediation found in references.
suse manager retail branch server	4.0 4.1 4.2 4.3
CPE cpe:2.3:a:suse:manager_retail_branch_server:4.0:::::::* cpe:2.3:a:suse:manager_retail_branch_server:4.1:::::::* cpe:2.3:a:suse:manager_retail_branch_server:4.2:::::::* cpe:2.3:a:suse:manager_retail_branch_server:4.3:::::::* Remediation No remediation found in references.
suse manager server	4.0 4.1 4.2 4.3
CPE cpe:2.3:a:suse:manager_server:4.0:::::::* cpe:2.3:a:suse:manager_server:4.1:::::::* cpe:2.3:a:suse:manager_server:4.2:::::::* cpe:2.3:a:suse:manager_server:4.3:::::::* Remediation No remediation found in references.
suse openstack cloud	9.0
CPE cpe:2.3:a:suse:openstack_cloud:9.0:::::::* Remediation No remediation found in references.
suse openstack cloud crowbar	9.0
CPE cpe:2.3:a:suse:openstack_cloud_crowbar:9.0:::::::* Remediation No remediation found in references.
suse basesystem module	15 sp1 15 sp2 15 sp3 15 sp4 15 sp5
CPE cpe:2.3:o:suse:basesystem_module:15:sp1::::suse_linux_enterprise::* cpe:2.3:o:suse:basesystem_module:15:sp2::::suse_linux_enterprise::* cpe:2.3:o:suse:basesystem_module:15:sp3::::suse_linux_enterprise::* cpe:2.3:o:suse:basesystem_module:15:sp4::::suse_linux_enterprise::* cpe:2.3:o:suse:basesystem_module:15:sp5::::suse_linux_enterprise::* cpe:2.3:o:suse:basesystem_module:15:sp6::::suse_linux_enterprise::* cpe:2.3:o:suse:basesystem_module:15:sp7::::suse_linux_enterprise::* Remediation No remediation found in references.
suse development tools module	15 sp1 15 sp2 15 sp3 15 sp4 15 sp5
CPE cpe:2.3:o:suse:development_tools_module:15:sp1::::suse_linux_enterprise::* cpe:2.3:o:suse:development_tools_module:15:sp2::::suse_linux_enterprise::* cpe:2.3:o:suse:development_tools_module:15:sp3::::suse_linux_enterprise::* cpe:2.3:o:suse:development_tools_module:15:sp4::::suse_linux_enterprise::* cpe:2.3:o:suse:development_tools_module:15:sp5::::suse_linux_enterprise::* cpe:2.3:o:suse:development_tools_module:15:sp6::::suse_linux_enterprise::* cpe:2.3:o:suse:development_tools_module:15:sp7::::suse_linux_enterprise::* Remediation No remediation found in references.
suse legacy module	15 sp7
CPE cpe:2.3:o:suse:legacy_module:15:sp7::::suse_linux_enterprise::* Remediation No remediation found in references.
suse linux enterprise desktop	11 sp4 12 sp4 15 sp1 15 sp2 15 sp3
CPE cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4:::::: cpe:2.3:o:suse:linux_enterprise_desktop:12:sp4:::::: cpe:2.3:o:suse:linux_enterprise_desktop:15:sp1:::::: cpe:2.3:o:suse:linux_enterprise_desktop:15:sp2:::::: cpe:2.3:o:suse:linux_enterprise_desktop:15:sp3:::::: cpe:2.3:o:suse:linux_enterprise_desktop:15:sp4:::::: cpe:2.3:o:suse:linux_enterprise_desktop:15:sp5:::::: cpe:2.3:o:suse:linux_enterprise_desktop:15:sp6:::::: cpe:2.3:o:suse:linux_enterprise_desktop:15:sp7:::::: Remediation No remediation found in references.
suse linux enterprise high availability extension	15 sp4 15 sp6 15 sp7 16.0 -
CPE cpe:2.3:o:suse:linux_enterprise_high_availability_extension:15:sp4:::::: cpe:2.3:o:suse:linux_enterprise_high_availability_extension:15:sp6:::::: cpe:2.3:o:suse:linux_enterprise_high_availability_extension:15:sp7:::::: cpe:2.3:o:suse:linux_enterprise_high_availability_extension:16.0:-:::::: Remediation No remediation found in references.
suse linux enterprise high performance computing	15.0 sp1 15.0 sp2 15.0 sp3 15.0 sp4 15.0 sp5
CPE cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp1:::-:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp1:::espos:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp1:::ltss:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp2:::-:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp2:::espos:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp2:::ltss:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp3:::-:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp3:::espos:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp3:::ltss:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp4:::-:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp4:::espos:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp4:::ltss:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp5:::-:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp5:::espos:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp5:::ltss:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp6:::-:::* cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp7:::-:::* Remediation No remediation found in references.
suse linux enterprise live patching	12 sp5 15 sp4 15 sp5 15 sp6 15 sp7
CPE cpe:2.3:o:suse:linux_enterprise_live_patching:12:sp5:::::: cpe:2.3:o:suse:linux_enterprise_live_patching:15:sp4:::::: cpe:2.3:o:suse:linux_enterprise_live_patching:15:sp5:::::: cpe:2.3:o:suse:linux_enterprise_live_patching:15:sp6:::::: cpe:2.3:o:suse:linux_enterprise_live_patching:15:sp7:::::: Remediation No remediation found in references.
suse linux enterprise micro	5.0 5.1 5.2 5.3 5.4
CPE cpe:2.3:o:suse:linux_enterprise_micro:5.0:::::-:: cpe:2.3:o:suse:linux_enterprise_micro:5.1:::::-:: cpe:2.3:o:suse:linux_enterprise_micro:5.2:::::-:: cpe:2.3:o:suse:linux_enterprise_micro:5.2:::::rancher:: cpe:2.3:o:suse:linux_enterprise_micro:5.3:::::-:: cpe:2.3:o:suse:linux_enterprise_micro:5.3:::::rancher:: cpe:2.3:o:suse:linux_enterprise_micro:5.4:::::-:: cpe:2.3:o:suse:linux_enterprise_micro:5.4:::::rancher:: cpe:2.3:o:suse:linux_enterprise_micro:5.5:::::-:: Remediation No remediation found in references.
suse linux enterprise real time	15.0 sp2 15.0 sp3 15.0 sp4 15.0 sp5 15.0 sp6
CPE cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp2:::::: cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp3:::::: cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp4:::::: cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp5:::::: cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp6:::::: cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp7:::::: Remediation No remediation found in references.
suse linux enterprise server	11 sp4 12 sp4 12 sp5 15 sp1 15 sp2
CPE cpe:2.3:o:suse:linux_enterprise_server:11:sp4:::-:-:: cpe:2.3:o:suse:linux_enterprise_server:11:sp4:::ltss:-:: cpe:2.3:o:suse:linux_enterprise_server:11:sp4:::ltss_extreme_core:-:: cpe:2.3:o:suse:linux_enterprise_server:12:sp4:::-:-:: cpe:2.3:o:suse:linux_enterprise_server:12:sp4:::-:sap:: cpe:2.3:o:suse:linux_enterprise_server:12:sp4:::espos:-:: cpe:2.3:o:suse:linux_enterprise_server:12:sp4:::ltss:-:: cpe:2.3:o:suse:linux_enterprise_server:12:sp5:::-:-:: cpe:2.3:o:suse:linux_enterprise_server:12:sp5:::ltss:-:: cpe:2.3:o:suse:linux_enterprise_server:12:sp5:::ltss_extended_security:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp1:::-:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp1:::-:sap:: cpe:2.3:o:suse:linux_enterprise_server:15:sp1:::business_critical_linux:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp1:::ltss:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp2:::-:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp2:::-:sap:: cpe:2.3:o:suse:linux_enterprise_server:15:sp2:::business_critical_linux:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp2:::ltss:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp3:::-:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp3:::-:sap:: cpe:2.3:o:suse:linux_enterprise_server:15:sp3:::business_critical_linux:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp3:::ltss:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp4:::-:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp4:::-:sap:: cpe:2.3:o:suse:linux_enterprise_server:15:sp4:::ltss:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp5:::-:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp5:::-:sap:: cpe:2.3:o:suse:linux_enterprise_server:15:sp5:::ltss:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp6:::-:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp6:::-:sap:: cpe:2.3:o:suse:linux_enterprise_server:15:sp6:::ltss:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp7:::-:-:: cpe:2.3:o:suse:linux_enterprise_server:15:sp7:::-:sap:: cpe:2.3:o:suse:linux_enterprise_server:16.0:-:::-:-:: cpe:2.3:o:suse:linux_enterprise_server:16.0:-:::-:sap:: cpe:2.3:o:suse:linux_enterprise_server:16.1:-:::-:-:: cpe:2.3:o:suse:linux_enterprise_server:16.1:-:::-:sap:: Remediation No remediation found in references.
suse linux enterprise workstation extension	15 sp7
CPE cpe:2.3:o:suse:linux_enterprise_workstation_extension:15:sp7:::::: Remediation No remediation found in references.
suse linux micro	6.0 6.1 6.2
CPE cpe:2.3:o:suse:linux_micro:6.0:::::::* cpe:2.3:o:suse:linux_micro:6.1:::::::* cpe:2.3:o:suse:linux_micro:6.2:::::::* Remediation No remediation found in references.
suse public cloud module	15 sp6 15 sp7
CPE cpe:2.3:o:suse:public_cloud_module:15:sp6::::suse_linux_enterprise::* cpe:2.3:o:suse:public_cloud_module:15:sp7::::suse_linux_enterprise::* Remediation No remediation found in references.
suse realtime module	15 sp3 15 sp4 15 sp5 15 sp6 15 sp7
CPE cpe:2.3:o:suse:realtime_module:15:sp3::::suse_linux_enterprise::* cpe:2.3:o:suse:realtime_module:15:sp4::::suse_linux_enterprise::* cpe:2.3:o:suse:realtime_module:15:sp5::::suse_linux_enterprise::* cpe:2.3:o:suse:realtime_module:15:sp6::::suse_linux_enterprise::* cpe:2.3:o:suse:realtime_module:15:sp7::::suse_linux_enterprise::* Remediation No remediation found in references.
nixos nixos	< 25.11
CPE cpe:2.3:o:nixos:nixos:::::::: Remediation No remediation found in references.
arista cloudvision agni	>= 2024.4.0, <= 2025.2.2
CPE cpe:2.3:a:arista:cloudvision_agni::::::-::* Remediation No remediation found in references.
arista cloudvision portal	>= 2024.2.0, <= 2026.1.0
CPE cpe:2.3:a:arista:cloudvision_portal:::::::: Remediation No remediation found in references.
arista velocloud edge	>= 4.5.0, <= 6.4.1
CPE cpe:2.3:a:arista:velocloud_edge:::::::: Remediation No remediation found in references.
arista velocloud gateway	All versions
CPE cpe:2.3:a:arista:velocloud_gateway:-:::::::* Remediation No remediation found in references.
arista velocloud orchestrator	All versions
CPE cpe:2.3:a:arista:velocloud_orchestrator:-:::::::* Remediation No remediation found in references.
arista netvisor os	< 7.1.0 7.1.0 - 7.1.0 hotfix7
CPE cpe:2.3:o:arista:netvisor_os:::::::: cpe:2.3:o:arista:netvisor_os:7.1.0:-:::::: cpe:2.3:o:arista:netvisor_os:7.1.0:hotfix7:::::: Remediation No remediation found in references.
siemens simatic s7-1500 cpu 1518-4 pn/dp mfp firmware	>= 3.1.5
CPE cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn/dp_mfp_firmware:::::::: Remediation No remediation found in references.
siemens simatic s7-1500 cpu 1518-4 pn/dp mfp	All versions
CPE cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn/dp_mfp:-:::::::* Remediation No remediation found in references.
siemens simatic s7-1500 cpu 1518f-4 pn/dp mfp firmware	>= 3.1.5
CPE cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn/dp_mfp_firmware:::::::: Remediation No remediation found in references.
siemens simatic s7-1500 cpu 1518f-4 pn/dp mfp	All versions
CPE cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518f-4_pn/dp_mfp:-:::::::* Remediation No remediation found in references.
siemens siplus s7-1500 cpu 1518-4 pn/dp mfp firmware	>= 3.1.5
CPE cpe:2.3:o:siemens:siplus_s7-1500_cpu_1518-4_pn/dp_mfp_firmware:::::::: Remediation No remediation found in references.
siemens siplus s7-1500 cpu 1518-4 pn/dp mfp	All versions
CPE cpe:2.3:h:siemens:siplus_s7-1500_cpu_1518-4_pn/dp_mfp:-:::::::* Remediation No remediation found in references.
siemens simatic s7-1500 tm mfp firmware	All versions
CPE cpe:2.3:o:siemens:simatic_s7-1500_tm_mfp_firmware:-:::::::* Remediation No remediation found in references.
siemens simatic s7-1500 tm mfp	All versions
CPE cpe:2.3:h:siemens:simatic_s7-1500_tm_mfp:-:::::::* Remediation No remediation found in references.
siemens simatic cn 4100 firmware	< 6.0
CPE cpe:2.3:o:siemens:simatic_cn_4100_firmware:::::::: Remediation No remediation found in references.
siemens simatic cn 4100	All versions
CPE cpe:2.3:h:siemens:simatic_cn_4100:-:::::::* Remediation No remediation found in references.
siemens simatic ax runtime	All versions
CPE cpe:2.3:a:siemens:simatic_ax_runtime:-:::::::* Remediation No remediation found in references.
siemens simatic hmi unified comfort panels firmware	< 21.0 21.0 - 21.0 update_1 21.0 update_2
CPE cpe:2.3:o:siemens:simatic_hmi_unified_comfort_panels_firmware:::::::: cpe:2.3:o:siemens:simatic_hmi_unified_comfort_panels_firmware:21.0:-:::::: cpe:2.3:o:siemens:simatic_hmi_unified_comfort_panels_firmware:21.0:update_1:::::: cpe:2.3:o:siemens:simatic_hmi_unified_comfort_panels_firmware:21.0:update_2:::::: Remediation No remediation found in references.
siemens simatic hmi mtp1000	All versions
CPE cpe:2.3:h:siemens:simatic_hmi_mtp1000:-:::::::* Remediation No remediation found in references.
siemens simatic hmi mtp1200	All versions
CPE cpe:2.3:h:siemens:simatic_hmi_mtp1200:-:::::::* Remediation No remediation found in references.
siemens simatic hmi mtp1500	All versions
CPE cpe:2.3:h:siemens:simatic_hmi_mtp1500:-:::::::* Remediation No remediation found in references.
siemens simatic hmi mtp1900	All versions
CPE cpe:2.3:h:siemens:simatic_hmi_mtp1900:-:::::::* Remediation No remediation found in references.
siemens simatic hmi mtp2200	All versions
CPE cpe:2.3:h:siemens:simatic_hmi_mtp2200:-:::::::* Remediation No remediation found in references.
siemens simatic hmi mtp700	All versions
CPE cpe:2.3:h:siemens:simatic_hmi_mtp700:-:::::::* Remediation No remediation found in references.
siemens simatic iot2050 advanced firmware	All versions
CPE cpe:2.3:o:siemens:simatic_iot2050_advanced_firmware:-:::::::* Remediation No remediation found in references.
siemens simatic iot2050 advanced	All versions
CPE cpe:2.3:h:siemens:simatic_iot2050_advanced:-:::::::* Remediation No remediation found in references.
siemens simatic ipc ied-os	All versions
CPE cpe:2.3:o:siemens:simatic_ipc_ied-os:-:::::::* Remediation No remediation found in references.

Change History

75 change records found show changes

Date	Action	Recorded By
Sep 8, 2026	Modified Analysis	[email protected]
Sep 8, 2026	CVE Modified	CVE
Sep 8, 2026	CVE Modified	kernel.org
Sep 8, 2026	CVE Modified	redhat-SADP
Sep 8, 2026	CVE Modified	siemens-SADP
Sep 8, 2026	CVE Modified	CISA-ADP
Jul 28, 2026	CPE Deprecation Remap	[email protected]
Jul 15, 2026	CVE Modified	redhat-SADP
Jul 14, 2026	Modified Analysis	[email protected]
Jul 14, 2026	CVE Modified	siemens-SADP
Jul 1, 2026	Reanalysis	[email protected]
Jul 1, 2026	Modified Analysis	[email protected]
Jul 1, 2026	CVE Modified	redhat-SADP
Jun 30, 2026	CVE Modified	redhat-SADP
Jun 17, 2026	CVE Modified	siemens-SADP
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
May 21, 2026	Reanalysis	[email protected]
May 18, 2026	Modified Analysis	[email protected]
May 18, 2026	CVE Modified	CVE
May 12, 2026	Modified Analysis	[email protected]
May 12, 2026	CVE Modified	siemens-SADP
May 11, 2026	Modified Analysis	[email protected]
May 8, 2026	CVE Modified	CVE
May 8, 2026	Modified Analysis	[email protected]
May 8, 2026	CVE Modified	CVE
May 8, 2026	Modified Analysis	[email protected]
May 8, 2026	CVE Modified	CVE
May 7, 2026	Modified Analysis	[email protected]
May 7, 2026	CVE Modified	CVE
May 6, 2026	Reanalysis	[email protected]
May 6, 2026	Modified Analysis	[email protected]
May 6, 2026	CVE Modified	CVE
May 5, 2026	Modified Analysis	[email protected]
May 5, 2026	CVE Modified	CVE
May 4, 2026	CVE Modified	CVE
May 4, 2026	CVE Modified	CVE
May 4, 2026	CVE Modified	CVE
May 4, 2026	CVE Modified	CVE
May 4, 2026	Modified Analysis	[email protected]
May 4, 2026	CVE Modified	CVE
May 3, 2026	CVE Modified	CVE
May 3, 2026	CVE Modified	CVE
May 3, 2026	CVE Modified	CVE
May 3, 2026	CVE Modified	CVE
May 3, 2026	CVE Modified	CVE
May 3, 2026	CVE Modified	CVE
May 3, 2026	CVE Modified	CVE
May 3, 2026	CVE Modified	CVE
May 2, 2026	CVE Modified	CVE
May 2, 2026	CVE Modified	CVE
May 2, 2026	CVE Modified	CVE
May 2, 2026	CVE Modified	CVE
May 1, 2026	CVE Modified	CVE
May 1, 2026	CVE Modified	CVE
May 1, 2026	CVE Modified	CVE
May 1, 2026	CVE Modified	CVE
May 1, 2026	CVE Modified	CVE
May 1, 2026	CVE Modified	CISA-ADP
May 1, 2026	Initial Analysis	[email protected]
May 1, 2026	CVE Modified	CVE
May 1, 2026	CVE Modified	CVE
Apr 30, 2026	CVE Modified	CVE
Apr 30, 2026	CVE Modified	CVE
Apr 30, 2026	CVE Modified	CVE
Apr 30, 2026	CVE Modified	CVE
Apr 30, 2026	CVE Modified	kernel.org
Apr 30, 2026	CVE Modified	CVE
Apr 30, 2026	CVE Modified	CVE
Apr 30, 2026	CVE Modified	CVE
Apr 30, 2026	CVE Modified	CVE
Apr 29, 2026	CVE Modified	CVE
Apr 29, 2026	CVE Modified	CISA-ADP
Apr 27, 2026	CVE Modified	kernel.org
Apr 22, 2026	New CVE Received	kernel.org

CVE-2026-31431 Details

Description

Metrics

References to Advisories, Solutions, and Tools

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE