kernel crypto

CVE-2026-31677 is a freshly published Linux kernel vulnerability that lands in a part of the kernel many administrators rarely think about: the AF_ALG cryptographic socket interface. The issue, now included in the NVD dataset but not yet scored by NIST, centers on receive-side scatterlist...

In the Linux kernel, CVE-2026-31431 marks a small but telling correction in the algif_aead crypto interface: the code is being pushed back toward out-of-place operation after a prior attempt to optimize for in-place handling proved unnecessary. The published description says the fix mostly...