Details of VAR-202604-2151

ID

VAR-202604-2151

CVE

CVE-2026-31431

TITLE

Linux kernel contains local privilege escalation vulnerability (Copy Fail)

Trust: 0.8

sources: CERT/CC: VU#260001

DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly. A privilege escalation vulnerability has been discovered in Linux kernel versions version 4.17 (released 2017) and later. Many popular distributions and Linux-based containers are affected. This vulnerability was publicly disclosed on April 29, 2026, has been assigned CVE ID CVE-2026-31431, and is commonly referred to as "Copy Fail."CVE-2026-31431 AffectedCVE-2026-31431 Affected. This fix is mainly committed. 72548b093ee3 This restores the original state, excluding the copied portions of related data. So, we eliminated all the complexity added for in-place operations and copied the relevant data directly.All information handled by the software may be leaked to the outside. All information handled by the software may be rewritten. Furthermore, the software may stop working completely. Furthermore, attacks that exploit this vulnerability will not affect other software

Trust: 2.34

sources: NVD: CVE-2026-31431 // CERT/CC: VU#260001 // JVNDB: JVNDB-2026-014253

AFFECTED PRODUCTS

vendor:	linux	model:	kernel	scope:	eq	version:	7.0	Trust: 1.8
vendor:	debian	model:	linux	scope:	eq	version:	13.0	Trust: 1.0
vendor:	suse	model:	manager proxy	scope:	eq	version:	4.0	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	lt	version:	4.15.64	Trust: 1.0
vendor:	suse	model:	linux enterprise desktop	scope:	eq	version:	12	Trust: 1.0
vendor:	redhat	model:	enterprise linux eus	scope:	eq	version:	10.0	Trust: 1.0
vendor:	suse	model:	linux enterprise workstation extension	scope:	eq	version:	15	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	lt	version:	4.14.65	Trust: 1.0
vendor:	opensuse	model:	leap	scope:	eq	version:	15.6	Trust: 1.0
vendor:	redhat	model:	enterprise linux	scope:	eq	version:	10.0	Trust: 1.0
vendor:	suse	model:	manager proxy	scope:	eq	version:	4.1	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	gte	version:	4.12	Trust: 1.0
vendor:	siemens	model:	simatic s7-1500 tm mfp	scope:	lt	version:	1.1	Trust: 1.0
vendor:	redhat	model:	enterprise linux eus	scope:	eq	version:	9.4	Trust: 1.0
vendor:	suse	model:	manager proxy	scope:	eq	version:	4.3	Trust: 1.0
vendor:	suse	model:	linux enterprise live patching	scope:	eq	version:	12	Trust: 1.0
vendor:	arista	model:	cloudvision agni	scope:	gte	version:	2024.4.0	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	gte	version:	4.15	Trust: 1.0
vendor:	redhat	model:	enterprise linux update services for sap solutions	scope:	eq	version:	8.6	Trust: 1.0
vendor:	suse	model:	linux micro	scope:	eq	version:	6.0	Trust: 1.0
vendor:	suse	model:	linux micro	scope:	eq	version:	6.1	Trust: 1.0
vendor:	suse	model:	enterprise storage	scope:	eq	version:	7.0	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	25.10	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	6.12.85	Trust: 1.0
vendor:	suse	model:	manager proxy	scope:	eq	version:	4.2	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	lt	version:	4.17.53	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	gte	version:	4.20	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	gte	version:	4.21	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	6.13	Trust: 1.0
vendor:	opensuse	model:	leap	scope:	eq	version:	15.3	Trust: 1.0
vendor:	suse	model:	openstack cloud crowbar	scope:	eq	version:	9.0	Trust: 1.0
vendor:	siemens	model:	simatic s7-1500 cpu 1518-4 pn\/dp mfp	scope:	gte	version:	3.1.5	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	lt	version:	4.20.21	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	6.2	Trust: 1.0
vendor:	redhat	model:	enterprise linux aus	scope:	eq	version:	8.6	Trust: 1.0
vendor:	redhat	model:	enterprise linux aus	scope:	eq	version:	8.4	Trust: 1.0
vendor:	suse	model:	public cloud module	scope:	eq	version:	15	Trust: 1.0
vendor:	redhat	model:	enterprise linux update services for sap solutions	scope:	eq	version:	9.0	Trust: 1.0
vendor:	redhat	model:	enterprise linux tus	scope:	eq	version:	8.6	Trust: 1.0
vendor:	suse	model:	manager retail branch server	scope:	eq	version:	4.0	Trust: 1.0
vendor:	suse	model:	linux enterprise server	scope:	eq	version:	16.1	Trust: 1.0
vendor:	redhat	model:	enterprise linux update services for sap solutions	scope:	eq	version:	8.8	Trust: 1.0
vendor:	suse	model:	openstack cloud	scope:	eq	version:	9.0	Trust: 1.0
vendor:	suse	model:	basesystem module	scope:	eq	version:	15	Trust: 1.0
vendor:	suse	model:	linux enterprise micro	scope:	eq	version:	5.4	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	-	Trust: 1.0
vendor:	suse	model:	linux enterprise micro	scope:	eq	version:	5.0	Trust: 1.0
vendor:	suse	model:	enterprise storage	scope:	eq	version:	6.0	Trust: 1.0
vendor:	suse	model:	manager retail branch server	scope:	eq	version:	4.1	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	5.16	Trust: 1.0
vendor:	redhat	model:	enterprise linux eus	scope:	eq	version:	8.4	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	gte	version:	4.13	Trust: 1.0
vendor:	suse	model:	manager retail branch server	scope:	eq	version:	4.3	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	22.04	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	lt	version:	4.16.61	Trust: 1.0
vendor:	redhat	model:	enterprise linux	scope:	eq	version:	8.0	Trust: 1.0
vendor:	suse	model:	enterprise storage	scope:	eq	version:	7.1	Trust: 1.0
vendor:	suse	model:	linux enterprise server	scope:	eq	version:	11	Trust: 1.0
vendor:	suse	model:	linux enterprise high availability extension	scope:	eq	version:	16.0	Trust: 1.0
vendor:	opensuse	model:	leap	scope:	eq	version:	15.5	Trust: 1.0
vendor:	opensuse	model:	leap	scope:	eq	version:	15.4	Trust: 1.0
vendor:	redhat	model:	enterprise linux update services for sap solutions	scope:	eq	version:	9.2	Trust: 1.0
vendor:	suse	model:	manager retail branch server	scope:	eq	version:	4.2	Trust: 1.0
vendor:	suse	model:	linux micro	scope:	eq	version:	6.2	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	6.7	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	gte	version:	4.14	Trust: 1.0
vendor:	suse	model:	realtime module	scope:	eq	version:	15	Trust: 1.0
vendor:	arista	model:	cloudvision portal	scope:	lte	version:	2026.1.0	Trust: 1.0
vendor:	suse	model:	linux enterprise desktop	scope:	eq	version:	11	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	lt	version:	4.12.89	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	5.15.204	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	eq	version:	4.0	Trust: 1.0
vendor:	nixos	model:	nixos	scope:	lt	version:	25.11	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	lt	version:	4.19.30	Trust: 1.0
vendor:	suse	model:	linux enterprise micro	scope:	eq	version:	5.3	Trust: 1.0
vendor:	suse	model:	manager server	scope:	eq	version:	4.0	Trust: 1.0
vendor:	arista	model:	velocloud orchestrator	scope:	eq	version:	-	Trust: 1.0
vendor:	redhat	model:	enterprise linux	scope:	eq	version:	9.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	6.19	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	lt	version:	4.18.40	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	24.04	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	lt	version:	4.21.14	Trust: 1.0
vendor:	arista	model:	netvisor os	scope:	lt	version:	7.1.0	Trust: 1.0
vendor:	arista	model:	velocloud edge	scope:	gte	version:	4.5.0	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	18.04	Trust: 1.0
vendor:	arista	model:	netvisor os	scope:	eq	version:	7.1.0	Trust: 1.0
vendor:	suse	model:	caas platform	scope:	eq	version:	4.0	Trust: 1.0
vendor:	suse	model:	manager server	scope:	eq	version:	4.1	Trust: 1.0
vendor:	arista	model:	cloudvision portal	scope:	gte	version:	2024.2.0	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	11.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	6.1.170	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	12.0	Trust: 1.0
vendor:	suse	model:	manager server	scope:	eq	version:	4.3	Trust: 1.0
vendor:	suse	model:	linux enterprise micro	scope:	eq	version:	5.1	Trust: 1.0
vendor:	suse	model:	linux enterprise high availability extension	scope:	eq	version:	15	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	gte	version:	4.17	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	gte	version:	4.16	Trust: 1.0
vendor:	suse	model:	development tools module	scope:	eq	version:	15	Trust: 1.0
vendor:	siemens	model:	simatic s7-1500 cpu 1518f-4 pn\/dp mfp	scope:	gte	version:	3.1.5	Trust: 1.0
vendor:	suse	model:	linux enterprise micro	scope:	eq	version:	5.2	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	5.11	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	5.10.254	Trust: 1.0
vendor:	suse	model:	linux enterprise micro	scope:	eq	version:	5.5	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	14.04	Trust: 1.0
vendor:	suse	model:	manager server	scope:	eq	version:	4.2	Trust: 1.0
vendor:	suse	model:	linux enterprise real time	scope:	eq	version:	15.0	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	gte	version:	4.19	Trust: 1.0
vendor:	suse	model:	linux enterprise server	scope:	eq	version:	15	Trust: 1.0
vendor:	arista	model:	velocloud gateway	scope:	eq	version:	-	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	20.04	Trust: 1.0
vendor:	suse	model:	legacy module	scope:	eq	version:	15	Trust: 1.0
vendor:	amazon	model:	linux	scope:	eq	version:	-	Trust: 1.0
vendor:	suse	model:	linux enterprise desktop	scope:	eq	version:	15	Trust: 1.0
vendor:	canonical	model:	ubuntu linux	scope:	eq	version:	16.04	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	gte	version:	4.18	Trust: 1.0
vendor:	arista	model:	cloudvision agni	scope:	lte	version:	2025.2.2	Trust: 1.0
vendor:	siemens	model:	siplus s7-1500 cpu 1518-4 pn\/dp mfp	scope:	gte	version:	3.1.5	Trust: 1.0
vendor:	redhat	model:	openshift container platform	scope:	lt	version:	4.13.66	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	6.19.12	Trust: 1.0
vendor:	arista	model:	velocloud edge	scope:	lte	version:	6.4.1	Trust: 1.0
vendor:	suse	model:	linux enterprise high performance computing	scope:	eq	version:	15.0	Trust: 1.0
vendor:	redhat	model:	enterprise linux tus	scope:	eq	version:	8.8	Trust: 1.0
vendor:	linux	model:	kernel	scope:	gte	version:	4.14	Trust: 1.0
vendor:	suse	model:	linux enterprise server	scope:	eq	version:	12	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	6.18.22	Trust: 1.0
vendor:	suse	model:	linux enterprise live patching	scope:	eq	version:	15	Trust: 1.0
vendor:	redhat	model:	enterprise linux eus	scope:	eq	version:	9.6	Trust: 1.0
vendor:	suse	model:	linux enterprise server	scope:	eq	version:	16.0	Trust: 1.0
vendor:	linux	model:	kernel	scope:	lt	version:	6.6.137	Trust: 1.0
vendor:	linux	model:	kernel	scope:	eq	version:	6.19 that's all 6.19.12	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	6.2 that's all 6.6.137	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	6.13 that's all 6.18.22	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	5.11 that's all 5.15.204	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	4.14 that's all 5.10.254	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	6.7 that's all 6.12.85	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	-	Trust: 0.8
vendor:	linux	model:	kernel	scope:	-	version:	-	Trust: 0.8
vendor:	linux	model:	kernel	scope:	eq	version:	5.16 that's all 6.1.170	Trust: 0.8

sources: JVNDB: JVNDB-2026-014253 // NVD: CVE-2026-31431

CVSS

SEVERITY

CVSSV2

CVSSV3

416baaa9-dc9f-4396-8d5f-8c081fb06d67:	CVE-2026-31431
value:	HIGH
Trust: 1.0
0b0ca135-0b70-47e7-9f44-1890c2a1c46c:	CVE-2026-31431
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2026-014253
value:	HIGH
Trust: 0.8

416baaa9-dc9f-4396-8d5f-8c081fb06d67:	CVE-2026-31431
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 2.0
OTHER:	JVNDB-2026-014253
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2026-014253 // NVD: CVE-2026-31431 // NVD: CVE-2026-31431

PROBLEMTYPE DATA

problemtype:	CWE-1288	Trust: 1.0
problemtype:	CWE-669	Trust: 1.0
problemtype:	Incorrect resource movement between regions (CWE-669) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2026-014253 // NVD: CVE-2026-31431

PATCH

title:

CVE-2026-31431, Linux algif_aead page-cache write to root

url:

https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170

Trust: 0.8

sources: JVNDB: JVNDB-2026-014253

EXTERNAL IDS

db:	NVD	id:	CVE-2026-31431	Trust: 3.4
db:	CERT/CC	id:	VU#260001	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/04/30/5	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/04/30/6	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/04/30/10	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/04/30/18	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/04/30/14	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/04/29/26	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/05/01/16	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/04/29/23	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/05/01/12	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/04/30/2	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/04/30/11	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/04/30/20	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/04/29/25	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/05/01/24	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/05/01/17	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/04/30/16	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/04/30/15	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/05/01/2	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/05/01/10	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/04/30/17	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/04/30/12	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/05/01/15	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/05/01/23	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/05/01/3	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/05/01/18	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/05/01/22	Trust: 1.8
db:	OPENWALL	id:	OSS-SECURITY/2026/05/08/13	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/03/12	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/15	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/04/1	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/04/8	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/20	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/18	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/04/31	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/03/3	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/04/14	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/04/2	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/21	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/03/10	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/18/3	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/5	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/04/10	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/06/5	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/04/9	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/03/13	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/04/29	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/25	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/7	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/07/12	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/19	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/24	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/03/5	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/07/2	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/04/11	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/04/12	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/04/13	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/03/4	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/4	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/14	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/04/24	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/6	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/8	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/03/6	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/17	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/04/28	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/23	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/04/27	Trust: 1.0
db:	OPENWALL	id:	OSS-SECURITY/2026/05/02/16	Trust: 1.0
db:	SIEMENS	id:	SSA-265688	Trust: 1.0
db:	SIEMENS	id:	SSA-019113	Trust: 1.0
db:	SIEMENS	id:	SSA-082556	Trust: 1.0
db:	JVNDB	id:	JVNDB-2026-014253	Trust: 0.8

sources: CERT/CC: VU#260001 // JVNDB: JVNDB-2026-014253 // NVD: CVE-2026-31431

REFERENCES

url:	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=cve-2026-31431	Trust: 1.8
url:	https://github.com/theori-io/copy-fail-cve-2026-31431	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/05/01/23	Trust: 1.8
url:	https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/04/29/26	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/04/29/25	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/05/01/10	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/05/01/17	Trust: 1.8
url:	https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c	Trust: 1.8
url:	https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/04/30/14	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/04/30/12	Trust: 1.8
url:	https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc	Trust: 1.8
url:	https://access.redhat.com/security/cve/cve-2026-31431#cve-details-mitigation	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/04/30/6	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/04/30/5	Trust: 1.8
url:	https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/05/01/16	Trust: 1.8
url:	https://copy.fail	Trust: 1.8
url:	https://xint.io/blog/copy-fail-linux-distributions#the-fix-6	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/04/30/17	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/05/01/22	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/04/30/11	Trust: 1.8
url:	https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/04/30/20	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/05/01/15	Trust: 1.8
url:	https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/05/01/3	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/04/30/16	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/04/30/18	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/05/01/2	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/04/29/23	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/05/01/12	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/04/30/2	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/04/30/10	Trust: 1.8
url:	https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82	Trust: 1.8
url:	https://lore.kernel.org/linux-cve-announce/2026042214-cve-2026-31431-3d65@gregkh/	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/04/30/15	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/05/01/18	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/05/01/24	Trust: 1.8
url:	http://www.openwall.com/lists/oss-security/2026/05/02/25	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/02/23	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/02/20	Trust: 1.0
url:	https://cert-portal.siemens.com/productcert/html/ssa-265688.html	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/04/10	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:16018	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/02/14	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/02/19	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/03/12	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:16208	Trust: 1.0
url:	https://cert-portal.siemens.com/productcert/html/ssa-082556.html	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:13936	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:13577	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:15087	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/04/24	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/04/2	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:15976	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:14339	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:19074	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/02/5	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:13681	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:13862	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/04/31	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/03/5	Trust: 1.0
url:	https://access.redhat.com/security/cve/cve-2026-31431	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:13565	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/03/10	Trust: 1.0
url:	https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/03/3	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:13932	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:13566	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:13885	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:13578	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:16210	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:14773	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:14097	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:19225	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:14301	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:14230	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:13734	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/07/12	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/04/14	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/02/7	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/04/11	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:13811	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:16209	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/07/2	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/03/6	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/02/18	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/04/12	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/18/3	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/02/16	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:16111	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/02/24	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:16063	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/02/6	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/06/5	Trust: 1.0
url:	https://cert-portal.siemens.com/productcert/html/ssa-019113.html	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/04/28	Trust: 1.0
url:	https://bugzilla.redhat.com/show_bug.cgi?id=2460538	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:14112	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:14165	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/02/15	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:15978	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/04/13	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:13690	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:13887	Trust: 1.0
url:	https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31431.json	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/04/27	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:13729	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/04/1	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:13727	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/08/13	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:14926	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/02/21	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/04/9	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/02/17	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/03/4	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/04/8	Trust: 1.0
url:	https://www.kb.cert.org/vuls/id/260001	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/03/13	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:33486	Trust: 1.0
url:	https://access.redhat.com/errata/rhsa-2026:14137	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/02/8	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/04/29	Trust: 1.0
url:	http://www.openwall.com/lists/oss-security/2026/05/02/4	Trust: 1.0
url:	https://nvd.nist.gov/vuln/detail/cve-2026-31431	Trust: 0.8

sources: JVNDB: JVNDB-2026-014253 // NVD: CVE-2026-31431

CREDITS

Statement Date: May 06, 2026

Trust: 0.8

sources: CERT/CC: VU#260001

SOURCES

db:	CERT/CC	id:	VU#260001
db:	JVNDB	id:	JVNDB-2026-014253
db:	NVD	id:	CVE-2026-31431

LAST UPDATE DATE

2026-07-28T21:17:00.833000+00:00

SOURCES UPDATE DATE

db:	CERT/CC	id:	VU#260001	date:	2026-05-08T00:00:00
db:	JVNDB	id:	JVNDB-2026-014253	date:	2026-05-07T03:06:00
db:	NVD	id:	CVE-2026-31431	date:	2026-07-28T14:54:01.770

SOURCES RELEASE DATE

db:	CERT/CC	id:	VU#260001	date:	2026-05-08T00:00:00
db:	JVNDB	id:	JVNDB-2026-014253	date:	2026-05-07T00:00:00
db:	NVD	id:	CVE-2026-31431	date:	2026-04-22T09:16:21.270