cve-2026-31431

The Linux kernel’s algif_aead code has received a narrowly scoped but security-relevant fix in CVE-2026-31431, and the public record makes the intent unusually clear: the subsystem is being pushed back to out-of-place operation, while preserving only the copying of associated data. The advisory...

In the Linux kernel, CVE-2026-31431 marks a small but telling correction in the algif_aead crypto interface: the code is being pushed back toward out-of-place operation after a prior attempt to optimize for in-place handling proved unnecessary. The published description says the fix mostly...