Fixing and finding
Jump to remediation plan
CVE ID
CVE-2026-31431
Published 2026-04-22
Updated 13 days ago
Vendor/s
Linux
Product/s
Kernel
Version/s
4.14 > 5.10.254
KEV Status
Active Exploitation
Listed in CISA's Known Exploited Vulnerabilities catalog. Active
exploitation observed in the wild.
CVSS Score (v3.1)
7.8
/ 10
High
Severity Details
Base score
7.8 High
Attack vector
Local
Attack complexity
Low
Privileges required
Low
User interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Description
CVE-2026-31431 is a high-severity Linux kernel vulnerability in algif_aead. Actively exploited and affects various distributions. Patch immediately.
CPE
Linux
| Product | Version Start | Version End (excl.) | Status |
|---|---|---|---|
| linux_kernel | 4.14 | 5.10.254 | vulnerable |
| linux_kernel | 5.11 | 5.15.204 | vulnerable |
| linux_kernel | 5.16 | 6.1.170 | vulnerable |
| linux_kernel | 6.2 | 6.6.137 | vulnerable |
| linux_kernel | 6.7 | 6.12.85 | vulnerable |
| linux_kernel | 6.13 | 6.18.22 | vulnerable |
| linux_kernel | 6.19 | 6.19.12 | vulnerable |
| linux_kernel | 7.0 | 7.0 | vulnerable |
| linux_kernel | 7.0 | 7.0 | vulnerable |
| linux_kernel | 7.0 | 7.0 | vulnerable |
| linux_kernel | 7.0 | 7.0 | vulnerable |
| linux_kernel | 7.0 | 7.0 | vulnerable |
| linux_kernel | 7.0 | 7.0 | vulnerable |
| openshift_container_platform | 4.12 | 4.12.89 | vulnerable |
| openshift_container_platform | 4.13 | 4.13.66 | vulnerable |
| openshift_container_platform | 4.14 | 4.14.65 | vulnerable |
| openshift_container_platform | 4.15 | 4.15.64 | vulnerable |
| openshift_container_platform | 4.16 | 4.16.61 | vulnerable |
| openshift_container_platform | 4.17 | 4.17.53 | vulnerable |
| openshift_container_platform | 4.18 | 4.18.40 | vulnerable |
| openshift_container_platform | 4.19 | 4.19.30 | vulnerable |
| openshift_container_platform | 4.20 | 4.20.21 | vulnerable |
| openshift_container_platform | 4.21 | 4.21.14 | vulnerable |
| openshift_container_platform | 4.0 | 4.0 | vulnerable |
| enterprise_linux | 8.0 | 8.0 | vulnerable |
| enterprise_linux | 9.0 | 9.0 | vulnerable |
| enterprise_linux | 10.0 | 10.0 | vulnerable |
| enterprise_linux_aus | 8.4 | 8.4 | vulnerable |
| enterprise_linux_aus | 8.6 | 8.6 | vulnerable |
| enterprise_linux_eus | 8.4 | 8.4 | vulnerable |
| enterprise_linux_eus | 9.4 | 9.4 | vulnerable |
| enterprise_linux_eus | 9.6 | 9.6 | vulnerable |
| enterprise_linux_eus | 10.0 | 10.0 | vulnerable |
| enterprise_linux_tus | 8.6 | 8.6 | vulnerable |
| enterprise_linux_tus | 8.8 | 8.8 | vulnerable |
| enterprise_linux_update_services_for_sap_solutions | 8.6 | 8.6 | vulnerable |
| enterprise_linux_update_services_for_sap_solutions | 8.8 | 8.8 | vulnerable |
| enterprise_linux_update_services_for_sap_solutions | 9.0 | 9.0 | vulnerable |
| enterprise_linux_update_services_for_sap_solutions | 9.2 | 9.2 | vulnerable |
| amazon_linux | - | - | vulnerable |
| ubuntu_linux | - | - | vulnerable |
| debian_linux | 11.0 | 11.0 | vulnerable |
| debian_linux | 12.0 | 12.0 | vulnerable |
| debian_linux | 13.0 | 13.0 | vulnerable |
| leap | 15.3 | 15.3 | vulnerable |
| leap | 15.4 | 15.4 | vulnerable |
| leap | 15.5 | 15.5 | vulnerable |
| leap | 15.6 | 15.6 | vulnerable |
| caas_platform | 4.0 | 4.0 | vulnerable |
| enterprise_storage | 6.0 | 6.0 | vulnerable |
| enterprise_storage | 7.0 | 7.0 | vulnerable |
| enterprise_storage | 7.1 | 7.1 | vulnerable |
| manager_proxy | 4.0 | 4.0 | vulnerable |
| manager_proxy | 4.1 | 4.1 | vulnerable |
| manager_proxy | 4.2 | 4.2 | vulnerable |
| manager_proxy | 4.3 | 4.3 | vulnerable |
| manager_retail_branch_server | 4.0 | 4.0 | vulnerable |
| manager_retail_branch_server | 4.1 | 4.1 | vulnerable |
| manager_retail_branch_server | 4.2 | 4.2 | vulnerable |
| manager_retail_branch_server | 4.3 | 4.3 | vulnerable |
| manager_server | 4.0 | 4.0 | vulnerable |
| manager_server | 4.1 | 4.1 | vulnerable |
| manager_server | 4.2 | 4.2 | vulnerable |
| manager_server | 4.3 | 4.3 | vulnerable |
| openstack_cloud | 9.0 | 9.0 | vulnerable |
| openstack_cloud_crowbar | 9.0 | 9.0 | vulnerable |
| basesystem_module | 15 | 15 | vulnerable |
| basesystem_module | 15 | 15 | vulnerable |
| basesystem_module | 15 | 15 | vulnerable |
| basesystem_module | 15 | 15 | vulnerable |
| basesystem_module | 15 | 15 | vulnerable |
| basesystem_module | 15 | 15 | vulnerable |
| basesystem_module | 15 | 15 | vulnerable |
| development_tools_module | 15 | 15 | vulnerable |
| development_tools_module | 15 | 15 | vulnerable |
| development_tools_module | 15 | 15 | vulnerable |
| development_tools_module | 15 | 15 | vulnerable |
| development_tools_module | 15 | 15 | vulnerable |
| development_tools_module | 15 | 15 | vulnerable |
| development_tools_module | 15 | 15 | vulnerable |
| legacy_module | 15 | 15 | vulnerable |
| linux_enterprise_desktop | 11 | 11 | vulnerable |
| linux_enterprise_desktop | 12 | 12 | vulnerable |
| linux_enterprise_desktop | 15 | 15 | vulnerable |
| linux_enterprise_desktop | 15 | 15 | vulnerable |
| linux_enterprise_desktop | 15 | 15 | vulnerable |
| linux_enterprise_desktop | 15 | 15 | vulnerable |
| linux_enterprise_desktop | 15 | 15 | vulnerable |
| linux_enterprise_desktop | 15 | 15 | vulnerable |
| linux_enterprise_desktop | 15 | 15 | vulnerable |
| linux_enterprise_high_availability_extension | 15 | 15 | vulnerable |
| linux_enterprise_high_availability_extension | 15 | 15 | vulnerable |
| linux_enterprise_high_availability_extension | 15 | 15 | vulnerable |
| linux_enterprise_high_availability_extension | 16.0 | 16.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_high_performance_computing | 15.0 | 15.0 | vulnerable |
| linux_enterprise_live_patching | 12 | 12 | vulnerable |
| linux_enterprise_live_patching | 15 | 15 | vulnerable |
| linux_enterprise_live_patching | 15 | 15 | vulnerable |
| linux_enterprise_live_patching | 15 | 15 | vulnerable |
| linux_enterprise_live_patching | 15 | 15 | vulnerable |
| linux_enterprise_micro | 5.0 | 5.0 | vulnerable |
| linux_enterprise_micro | 5.1 | 5.1 | vulnerable |
| linux_enterprise_micro | 5.2 | 5.2 | vulnerable |
| linux_enterprise_micro | 5.2 | 5.2 | vulnerable |
| linux_enterprise_micro | 5.3 | 5.3 | vulnerable |
| linux_enterprise_micro | 5.3 | 5.3 | vulnerable |
| linux_enterprise_micro | 5.4 | 5.4 | vulnerable |
| linux_enterprise_micro | 5.4 | 5.4 | vulnerable |
| linux_enterprise_micro | 5.5 | 5.5 | vulnerable |
| linux_enterprise_real_time | 15.0 | 15.0 | vulnerable |
| linux_enterprise_real_time | 15.0 | 15.0 | vulnerable |
| linux_enterprise_real_time | 15.0 | 15.0 | vulnerable |
| linux_enterprise_real_time | 15.0 | 15.0 | vulnerable |
| linux_enterprise_real_time | 15.0 | 15.0 | vulnerable |
| linux_enterprise_real_time | 15.0 | 15.0 | vulnerable |
| linux_enterprise_server | 11 | 11 | vulnerable |
| linux_enterprise_server | 11 | 11 | vulnerable |
| linux_enterprise_server | 11 | 11 | vulnerable |
| linux_enterprise_server | 12 | 12 | vulnerable |
| linux_enterprise_server | 12 | 12 | vulnerable |
| linux_enterprise_server | 12 | 12 | vulnerable |
| linux_enterprise_server | 12 | 12 | vulnerable |
| linux_enterprise_server | 12 | 12 | vulnerable |
| linux_enterprise_server | 12 | 12 | vulnerable |
| linux_enterprise_server | 12 | 12 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 15 | 15 | vulnerable |
| linux_enterprise_server | 16.0 | 16.0 | vulnerable |
| linux_enterprise_server | 16.0 | 16.0 | vulnerable |
| linux_enterprise_server | 16.1 | 16.1 | vulnerable |
| linux_enterprise_server | 16.1 | 16.1 | vulnerable |
| linux_enterprise_workstation_extension | 15 | 15 | vulnerable |
| linux_micro | 6.0 | 6.0 | vulnerable |
| linux_micro | 6.1 | 6.1 | vulnerable |
| linux_micro | 6.2 | 6.2 | vulnerable |
| public_cloud_module | 15 | 15 | vulnerable |
| public_cloud_module | 15 | 15 | vulnerable |
| realtime_module | 15 | 15 | vulnerable |
| realtime_module | 15 | 15 | vulnerable |
| realtime_module | 15 | 15 | vulnerable |
| realtime_module | 15 | 15 | vulnerable |
| realtime_module | 15 | 15 | vulnerable |
| nixos | * | 25.11 | vulnerable |
| cloudvision_agni | 2024.4.0 | 2025.2.2 | vulnerable |
| cloudvision_portal | 2024.2.0 | 2026.1.0 | vulnerable |
| velocloud_edge | 4.5.0 | 6.4.1 | vulnerable |
| velocloud_gateway | - | - | vulnerable |
| velocloud_orchestrator | - | - | vulnerable |
| netvisor_os | * | 7.1.0 | vulnerable |
| netvisor_os | 7.1.0 | 7.1.0 | vulnerable |
| netvisor_os | 7.1.0 | 7.1.0 | vulnerable |
| simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware | 3.1.5 | * | vulnerable |
| simatic_s7-1500_cpu_1518-4_pn\/dp_mfp | - | - | unaffected |
| simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware | 3.1.5 | * | vulnerable |
| simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp | - | - | unaffected |
| siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware | 3.1.5 | * | vulnerable |
| siplus_s7-1500_cpu_1518-4_pn\/dp_mfp | - | - | unaffected |
| simatic_s7-1500_tm_mfp_firmware | - | - | vulnerable |
| simatic_s7-1500_tm_mfp | - | - | unaffected |
| ubuntu_linux | 14.04 | 14.04 | vulnerable |
| ubuntu_linux | 16.04 | 16.04 | vulnerable |
| ubuntu_linux | 18.04 | 18.04 | vulnerable |
| ubuntu_linux | 20.04 | 20.04 | vulnerable |
| ubuntu_linux | 22.04 | 22.04 | vulnerable |
| ubuntu_linux | 24.04 | 24.04 | vulnerable |
| ubuntu_linux | 25.10 | 25.10 | vulnerable |
| simatic_cn_4100_firmware | * | 6.0 | vulnerable |
| simatic_cn_4100 | - | - | unaffected |
| simatic_ax_runtime | - | - | vulnerable |
| simatic_hmi_unified_comfort_panels_firmware | * | 21.0 | vulnerable |
| simatic_hmi_unified_comfort_panels_firmware | 21.0 | 21.0 | vulnerable |
| simatic_hmi_unified_comfort_panels_firmware | 21.0 | 21.0 | vulnerable |
| simatic_hmi_unified_comfort_panels_firmware | 21.0 | 21.0 | vulnerable |
| simatic_hmi_mtp1000 | - | - | unaffected |
| simatic_hmi_mtp1200 | - | - | unaffected |
| simatic_hmi_mtp1500 | - | - | unaffected |
| simatic_hmi_mtp1900 | - | - | unaffected |
| simatic_hmi_mtp2200 | - | - | unaffected |
| simatic_hmi_mtp700 | - | - | unaffected |
| simatic_iot2050_advanced_firmware | - | - | vulnerable |
| simatic_iot2050_advanced | - | - | unaffected |
| simatic_ipc_ied-os | - | - | vulnerable |
Related weakness (CWE)
CWE-669, CWE-1288
Remediation plan
1
Apply official patches
Consult your specific Linux distribution's security advisories (such as Red Hat, Ubuntu, Debian, or SUSE) and apply the latest kernel security updates that include the fix for the algif_aead regression.
2
Update affected systems
Ensure your Linux kernel is updated to a non-vulnerable version. Fixed versions include 5.10.254, 5.15.204, 6.1.170, 6.6.137, 6.12.85, 6.18.22, 6.19.12, or later, depending on your specific stable release branch.
3
Restrict access
As this is a local attack vector, enforce the principle of least privilege (PoLP) to limit shell access. Additionally, consider using Linux Security Modules (LSMs) like SELinux or AppArmor to restrict access to AF_ALG sockets to only authorized services.
4
Monitor for exploitation
Audit system logs for kernel 'oops' messages or panics related to crypto API mappings. Use tools like auditd to monitor for suspicious calls to the AF_ALG address family from unauthorized user accounts.
Detection Guidance
Practical detection involves monitoring for kernel instability or memory corruption indicators. Watch for system logs containing 'algif_aead' or 'crypto' related stack traces. Implement auditd rules to log AF_ALG socket creation and bind operations. Security teams should prioritize EDR signatures that detect local privilege escalation patterns or unusual kernel memory access. Network-based detection is less effective here due to the local nature of the attack vector, so focus on host-based telemetry and integrity monitoring.
References
https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c Patch https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc Patch https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667 Patch https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82 Patch https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b Patch https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5 Patch https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237 Patch https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8 Patch http://www.openwall.com/lists/oss-security/2026/04/29/23 Exploit Mailing List Patch http://www.openwall.com/lists/oss-security/2026/04/29/25 Mailing List Patch http://www.openwall.com/lists/oss-security/2026/04/29/26 Exploit Mailing List Patch http://www.openwall.com/lists/oss-security/2026/04/30/10 Mailing List Patch http://www.openwall.com/lists/oss-security/2026/04/30/11 Mailing List Patch http://www.openwall.com/lists/oss-security/2026/04/30/12 Mailing List Patch http://www.openwall.com/lists/oss-security/2026/04/30/14 Mailing List Patch http://www.openwall.com/lists/oss-security/2026/04/30/15 Mailing List Patch http://www.openwall.com/lists/oss-security/2026/04/30/16 Mailing List Patch http://www.openwall.com/lists/oss-security/2026/04/30/17 Mailing List http://www.openwall.com/lists/oss-security/2026/04/30/18 Exploit Mailing List http://www.openwall.com/lists/oss-security/2026/04/30/2 Mailing List http://www.openwall.com/lists/oss-security/2026/04/30/20 Mailing List http://www.openwall.com/lists/oss-security/2026/04/30/5 Exploit Mailing List Patch http://www.openwall.com/lists/oss-security/2026/04/30/6 Mailing List http://www.openwall.com/lists/oss-security/2026/05/01/10 Mailing List http://www.openwall.com/lists/oss-security/2026/05/01/12 Mailing List http://www.openwall.com/lists/oss-security/2026/05/01/15 Mailing List http://www.openwall.com/lists/oss-security/2026/05/01/16 Mailing List http://www.openwall.com/lists/oss-security/2026/05/01/17 Mailing List http://www.openwall.com/lists/oss-security/2026/05/01/18 Mailing List http://www.openwall.com/lists/oss-security/2026/05/01/2 Mailing List http://www.openwall.com/lists/oss-security/2026/05/01/22 Mailing List http://www.openwall.com/lists/oss-security/2026/05/01/23 Mailing List http://www.openwall.com/lists/oss-security/2026/05/01/24 Mailing List http://www.openwall.com/lists/oss-security/2026/05/01/3 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/14 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/15 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/16 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/17 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/18 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/19 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/20 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/21 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/23 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/24 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/25 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/4 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/5 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/6 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/7 Mailing List http://www.openwall.com/lists/oss-security/2026/05/02/8 Mailing List http://www.openwall.com/lists/oss-security/2026/05/03/10 Mailing List http://www.openwall.com/lists/oss-security/2026/05/03/12 Mailing List http://www.openwall.com/lists/oss-security/2026/05/03/13 Mailing List http://www.openwall.com/lists/oss-security/2026/05/03/3 Mailing List http://www.openwall.com/lists/oss-security/2026/05/03/4 Mailing List http://www.openwall.com/lists/oss-security/2026/05/03/5 Mailing List http://www.openwall.com/lists/oss-security/2026/05/03/6 Mailing List http://www.openwall.com/lists/oss-security/2026/05/04/1 Mailing List http://www.openwall.com/lists/oss-security/2026/05/04/10 Mailing List http://www.openwall.com/lists/oss-security/2026/05/04/11 Mailing List http://www.openwall.com/lists/oss-security/2026/05/04/12 Mailing List http://www.openwall.com/lists/oss-security/2026/05/04/13 Mailing List http://www.openwall.com/lists/oss-security/2026/05/04/14 Mailing List http://www.openwall.com/lists/oss-security/2026/05/04/2 Mailing List http://www.openwall.com/lists/oss-security/2026/05/04/24 Mailing List http://www.openwall.com/lists/oss-security/2026/05/04/27 Mailing List http://www.openwall.com/lists/oss-security/2026/05/04/28 Mailing List http://www.openwall.com/lists/oss-security/2026/05/04/29 Mailing List http://www.openwall.com/lists/oss-security/2026/05/04/31 Mailing List http://www.openwall.com/lists/oss-security/2026/05/04/8 Mailing List http://www.openwall.com/lists/oss-security/2026/05/04/9 Mailing List http://www.openwall.com/lists/oss-security/2026/05/06/5 Mailing List http://www.openwall.com/lists/oss-security/2026/05/07/12 Mailing List http://www.openwall.com/lists/oss-security/2026/05/07/2 Mailing List http://www.openwall.com/lists/oss-security/2026/05/08/13 Mailing List http://www.openwall.com/lists/oss-security/2026/05/18/3 Mailing List https://copy.fail Exploit https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170 Exploit Third Party Advisory https://www.kb.cert.org/vuls/id/260001 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:13565 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:13566 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:13577 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:13578 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:13681 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:13690 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:13727 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:13729 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:13734 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:13811 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:13862 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:13885 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:13887 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:13932 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:13936 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:14097 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:14112 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:14137 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:14165 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:14230 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:14301 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:14339 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:14773 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:14926 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:15087 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:15976 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:15978 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:16018 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:16063 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:16111 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:16208 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:16209 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:16210 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:19074 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:19225 Third Party Advisory https://access.redhat.com/errata/RHSA-2026:33486 Third Party Advisory https://access.redhat.com/security/cve/CVE-2026-31431 Third Party Advisory https://access.redhat.com/security/cve/cve-2026-31431#cve-details-mitigation Third Party Advisory https://bugzilla.redhat.com/show_bug.cgi?id=2460538 Issue Tracking Third Party Advisory https://cert-portal.siemens.com/productcert/html/ssa-019113.html Third Party Advisory https://cert-portal.siemens.com/productcert/html/ssa-082556.html Third Party Advisory https://cert-portal.siemens.com/productcert/html/ssa-265688.html Third Party Advisory https://cert-portal.siemens.com/productcert/html/ssa-328642.html Third Party Advisory https://github.com/theori-io/copy-fail-CVE-2026-31431 Exploit https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/ Vendor Advisory https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31431.json Third Party Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-31431 US Government Resource https://xint.io/blog/copy-fail-linux-distributions#the-fix-6 Exploit Patch Third Party Advisory
Sources
NIST National Vulnerability Database (NVD)
CISA Known Exploited Vulnerabilities (KEV)