CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place
In CISA’s Known Exploited Vulnerabilities catalog: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability.
Added , federal remediation due . Known ransomware use: Unknown.
Required action: "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Status incidents that name it
- · Minor · names this CVE
- Contentstack Contentstack - Global Infrastructure - Proactive Infrastructure Security Update "Copy Fail" Vulnerability (CVE-2026-31431)· No impact listed · names this CVE
“Contentstack - Global Infrastructure - Proactive Infrastructure Security Update "Copy Fail" Vulnerability (CVE-2026-31431) An industry-wide security vulnerability known as "Copy Fail" (CVE-2026-31431) was publicly disclosed. This critical…”
- · Minor · names this CVE
- · Minor · names this CVE
“(Copy Fail) Linux Kernel Local Privilege Escalation Vulnerability [CVE-2026-31431] We have completed our investigation and response to the “Copy Fail” Linux kernel local privilege escalation…”
- · No impact listed · names this CVE
“Aptible response to CVE-2026-31431 Aptible is aware of CVE-2026-31431, also known as “Copy Fail,” a recently disclosed Linux kernel vulnerability that may allow local privilege escalation…”
Affected vendors and products
Linux: LinuxSiemens: SIMATIC AX Runtime Core Linux Common DebianSiemens: SIMATIC AX Runtime Core Linux Common Debian arm64Siemens: SIMATIC AX Runtime Core Linux Platform Container Common Debian DevelopmentSiemens: SIMATIC AX Runtime Core Linux VMWare DevelopmentSiemens: SIMATIC CN 4100Siemens: SIMATIC HMI MTP1000 Unified BasicSiemens: SIMATIC HMI MTP1000 Unified Comfort PanelSiemens: SIMATIC HMI MTP1000 Unified Comfort Panel hygienicSiemens: SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral designSiemens: SIMATIC HMI MTP1000, Unified Comfort Panel neutralSiemens: SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom)Siemens: SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unitSiemens: SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top)Siemens: SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom)Siemens: SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensionSiemens: SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top)Siemens: SIMATIC HMI MTP1200 Unified BasicSiemens: SIMATIC HMI MTP1200 Unified Comfort PanelSiemens: SIMATIC HMI MTP1200 Unified Comfort Panel hygienicSiemens: SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral designSiemens: SIMATIC HMI MTP1200 Unified Comfort Panel neutral designSiemens: SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom)Siemens: SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unitSiemens: SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top)Siemens: SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom)Siemens: SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensionSiemens: SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top)Siemens: SIMATIC HMI MTP1500 Unified Comfort PanelSiemens: SIMATIC HMI MTP1500 Unified Comfort Panel hygienicSiemens: SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral designSiemens: SIMATIC HMI MTP1500 Unified Comfort Panel neutral designSiemens: SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom)Siemens: SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unitSiemens: SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top)Siemens: SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom)Siemens: SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensionSiemens: SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top)Siemens: SIMATIC HMI MTP1900 Unified Comfort PanelSiemens: SIMATIC HMI MTP1900 Unified Comfort Panel hygienicSiemens: SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral designSiemens: SIMATIC HMI MTP1900 Unified Comfort Panel neutral designSiemens: SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom)Siemens: SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unitSiemens: SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top)Siemens: SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom)Siemens: SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensionSiemens: SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top)Siemens: SIMATIC HMI MTP2200 Unified Comfort HygienicSiemens: SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral designSiemens: SIMATIC HMI MTP2200 Unified Comfort PanelSiemens: SIMATIC HMI MTP2200 Unified Comfort Panel neutral designSiemens: SIMATIC HMI MTP400 Unified BasicSiemens: SIMATIC HMI MTP700 Unified BasicSiemens: SIMATIC HMI MTP700 Unified Comfort PanelSiemens: SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral designSiemens: SIMATIC HMI MTP700, Unified Comfort Panel neutral designSiemens: SIMATIC IoT2050 AdvancedSiemens: SIMATIC IPC Industrial Edge Device OS (IED-OS)
References
- CVE record on cve.org (opens in new tab)
- NVD entry (opens in new tab)
- git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c (opens in new tab)
- git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc (opens in new tab)
- git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667 (opens in new tab)
- git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82 (opens in new tab)
- git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b (opens in new tab)
- git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5 (opens in new tab)
- git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237 (opens in new tab)
- git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8 (opens in new tab)
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)