# CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place

> CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place. CVSS 7.8 (CVSS 3.1), in CISA KEV, named in 5 status incident(s).

Canonical: https://rewindex.com/cve/CVE-2026-31431
Last updated: 2026-10-15T01:16:12Z

- Published: 2026-04-22 08:15 UTC · Updated: 2026-10-15 01:16 UTC · Assigner: Linux
- CVSS: 7.8 (CVSS 3.1) · Severity: High · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS: 98.1%, 100th percentile (scored 2026-10-25)
- CISA KEV: yes, added 2026-05-01, federal due date 2026-05-15, ransomware use: Unknown

## Description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif\_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif\_aead since the source and destination come from different mappings.  Get rid of all the complexity added for in-place operation and just copy the AD directly.

## CISA required action

"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

## Affected vendors and products

- Linux: Linux
- Siemens: SIMATIC AX Runtime Core Linux Common Debian
- Siemens: SIMATIC AX Runtime Core Linux Common Debian arm64
- Siemens: SIMATIC AX Runtime Core Linux Platform Container Common Debian Development
- Siemens: SIMATIC AX Runtime Core Linux VMWare Development
- Siemens: SIMATIC CN 4100
- Siemens: SIMATIC HMI MTP1000 Unified Basic
- Siemens: SIMATIC HMI MTP1000 Unified Comfort Panel
- Siemens: SIMATIC HMI MTP1000 Unified Comfort Panel hygienic
- Siemens: SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design
- Siemens: SIMATIC HMI MTP1000, Unified Comfort Panel neutral
- Siemens: SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom)
- Siemens: SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit
- Siemens: SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top)
- Siemens: SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom)
- Siemens: SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension
- Siemens: SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top)
- Siemens: SIMATIC HMI MTP1200 Unified Basic
- Siemens: SIMATIC HMI MTP1200 Unified Comfort Panel
- Siemens: SIMATIC HMI MTP1200 Unified Comfort Panel hygienic
- Siemens: SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design
- Siemens: SIMATIC HMI MTP1200 Unified Comfort Panel neutral design
- Siemens: SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom)
- Siemens: SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit
- Siemens: SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top)
- Siemens: SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom)
- Siemens: SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension
- Siemens: SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top)
- Siemens: SIMATIC HMI MTP1500 Unified Comfort Panel
- Siemens: SIMATIC HMI MTP1500 Unified Comfort Panel hygienic
- Siemens: SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design
- Siemens: SIMATIC HMI MTP1500 Unified Comfort Panel neutral design
- Siemens: SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom)
- Siemens: SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit
- Siemens: SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top)
- Siemens: SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom)
- Siemens: SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension
- Siemens: SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top)
- Siemens: SIMATIC HMI MTP1900 Unified Comfort Panel
- Siemens: SIMATIC HMI MTP1900 Unified Comfort Panel hygienic
- Siemens: SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design
- Siemens: SIMATIC HMI MTP1900 Unified Comfort Panel neutral design
- Siemens: SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom)
- Siemens: SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit
- Siemens: SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top)
- Siemens: SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom)
- Siemens: SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension
- Siemens: SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top)
- Siemens: SIMATIC HMI MTP2200 Unified Comfort Hygienic
- Siemens: SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design
- Siemens: SIMATIC HMI MTP2200 Unified Comfort Panel
- Siemens: SIMATIC HMI MTP2200 Unified Comfort Panel neutral design
- Siemens: SIMATIC HMI MTP400 Unified Basic
- Siemens: SIMATIC HMI MTP700 Unified Basic
- Siemens: SIMATIC HMI MTP700 Unified Comfort Panel
- Siemens: SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design
- Siemens: SIMATIC HMI MTP700, Unified Comfort Panel neutral design
- Siemens: SIMATIC IoT2050 Advanced
- Siemens: SIMATIC IPC Industrial Edge Device OS (IED-OS)

## Status incidents that name it

- 2026-05-13 21:02 UTC [Linode (Akamai): \[Fragnesia\] Linux Privilege Escalation Vulnerability](https://rewindex.com/company/linode-akamai/incidents/m3r11p4pq1zv.md) (names this CVE)
- 2026-05-09 11:19 UTC [Contentstack: Contentstack - Global Infrastructure - Proactive Infrastructure Security Update "Copy Fail" Vulnerability (CVE-2026-31431)](https://rewindex.com/company/contentstack/incidents/b04d64mfq0rq.md) (names this CVE): “Contentstack - Global Infrastructure - Proactive Infrastructure Security Update "Copy Fail" Vulnerability (CVE-2026-31431) An industry-wide security vulnerability known as "Copy Fail" (CVE-2026-31431) was publicly disclosed. This critical…”
- 2026-05-08 13:40 UTC [Linode (Akamai): \[DirtyFrag\] Linux Privilege Escalation Vulnerability](https://rewindex.com/company/linode-akamai/incidents/wsvxwlyhw1t5.md) (names this CVE)
- 2026-05-01 17:51 UTC [Linode (Akamai): (Copy Fail) Linux Kernel Local Privilege Escalation Vulnerability \[CVE-2026-31431\]](https://rewindex.com/company/linode-akamai/incidents/msqh44ktjp9g.md) (names this CVE): “(Copy Fail) Linux Kernel Local Privilege Escalation Vulnerability \[CVE-2026-31431\] We have completed our investigation and response to the “Copy Fail” Linux kernel local privilege escalation…”
- 2026-04-29 22:40 UTC [Aptible: Aptible response to CVE-2026-31431](https://rewindex.com/company/aptible/incidents/mpqvng52qt7s.md) (names this CVE): “Aptible response to CVE-2026-31431 Aptible is aware of CVE-2026-31431, also known as “Copy Fail,” a recently disclosed Linux kernel vulnerability that may allow local privilege escalation…”

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2026-31431)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2026-31431)
- [https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c](https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c)
- [https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc](https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc)
- [https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667](https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667)
- [https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82](https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82)
- [https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b](https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b)
- [https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5](https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5)
- [https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237](https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237)
- [https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8](https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2026-31431 · Markdown: https://rewindex.com/cve/CVE-2026-31431.md · JSON: https://rewindex.com/api/v1/cves/CVE-2026-31431 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T02:15:38.329Z