CVE-2026-31431: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
Published Apr 22, 2026
·Updated
crypto: algifaead - Revert to operating out-of-place
Other sources
Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.
— CISA
Affected Software
231 affected componentsFixes available
Linux Linux kernel
Linux Kernel
Microsoft azl3 kernel 6.6.134.1-2
Microsoft azl3 kernel-hwe 0:6.12-1
debian/linux<=5.10.223-1
5.10.257-16.1.170-36.1.174-16.12.86-16.12.94-17.0.12-27.0.13-1
debian/linux-6.1
6.1.174-1~deb11u1
IBM Verify Identity Access<=11.0 - 11.0.2
IBM Security Verify Access<=10.0 - 10.0.9.1
IBM Verify Identity Access Container<=11.0 - 11.0.2
IBM Security Verify Access Container<=10.0 - 10.0.9.1
Microsoft azl3 kernel-hwe 0:6.12-1<6.12.85.1-1
6.12.85.1-1
Microsoft azl3 kernel 6.6.134.1-2<6.6.137.1-1
6.6.137.1-1
Linux Linux kernel>=4.14<5.10.254
Linux Linux kernel>=5.11<5.15.204
Linux Linux kernel>=5.16<6.1.170
Linux Linux kernel>=6.2<6.6.137
Linux Linux kernel>=6.7<6.12.85
Linux Linux kernel>=6.13<6.18.22
Linux Linux kernel>=6.19<6.19.12
Linux Linux kernel=7.0-rc1
Linux Linux kernel=7.0-rc2
Linux Linux kernel=7.0-rc3
Linux Linux kernel=7.0-rc4
Linux Linux kernel=7.0-rc5
Linux Linux kernel=7.0-rc6
redhat OpenShift Container Platform>=4.12<4.12.89
redhat OpenShift Container Platform>=4.13<4.13.66
redhat OpenShift Container Platform>=4.14<4.14.65
redhat OpenShift Container Platform>=4.15<4.15.64
redhat OpenShift Container Platform>=4.16<4.16.61
redhat OpenShift Container Platform>=4.17<4.17.53
redhat OpenShift Container Platform>=4.18<4.18.40
redhat OpenShift Container Platform>=4.19<4.19.30
redhat OpenShift Container Platform>=4.20<4.20.21
redhat OpenShift Container Platform>=4.21<4.21.14
redhat OpenShift Container Platform=4.0
redhat Enterprise Linux=8.0
redhat Enterprise Linux=9.0
redhat Enterprise Linux=10.0
redhat Enterprise Linux Aus=8.4
redhat Enterprise Linux Aus=8.6
redhat Enterprise Linux Eus=8.4
redhat Enterprise Linux Eus=9.4
redhat Enterprise Linux Eus=9.6
redhat Enterprise Linux Eus=10.0
redhat Enterprise Linux Tus=8.6
redhat Enterprise Linux Tus=8.8
redhat Enterprise Linux Update Services For Sap Solutions=8.6
redhat Enterprise Linux Update Services For Sap Solutions=8.8
redhat Enterprise Linux Update Services For Sap Solutions=9.0
redhat Enterprise Linux Update Services For Sap Solutions=9.2
Amazon Amazon Linux
Canonical Ubuntu Linux
Debian Debian Linux=11.0
Debian Debian Linux=12.0
Debian Debian Linux=13.0
openSUSE Leap=15.3
openSUSE Leap=15.4
openSUSE Leap=15.5
openSUSE Leap=15.6
SUSE CaaS Platform=4.0
SUSE Enterprise Storage=6.0
SUSE Enterprise Storage=7.0
SUSE Enterprise Storage=7.1
SUSE Manager Proxy=4.0
SUSE Manager Proxy=4.1
SUSE Manager Proxy=4.2
SUSE Manager Proxy=4.3
SUSE Manager Retail Branch Server=4.0
SUSE Manager Retail Branch Server=4.1
SUSE Manager Retail Branch Server=4.2
SUSE Manager Retail Branch Server=4.3
SUSE Manager Server=4.0
SUSE Manager Server=4.1
SUSE Manager Server=4.2
SUSE Manager Server=4.3
SUSE Openstack Cloud=9.0
SUSE OpenStack Cloud Crowbar=9.0
SUSE Basesystem Module Suse Linux Enterprise=15-sp1
SUSE Basesystem Module Suse Linux Enterprise=15-sp2
SUSE Basesystem Module Suse Linux Enterprise=15-sp3
SUSE Basesystem Module Suse Linux Enterprise=15-sp4
SUSE Basesystem Module Suse Linux Enterprise=15-sp5
SUSE Basesystem Module Suse Linux Enterprise=15-sp6
SUSE Basesystem Module Suse Linux Enterprise=15-sp7
SUSE Development Tools Module Suse Linux Enterprise=15-sp1
SUSE Development Tools Module Suse Linux Enterprise=15-sp2
SUSE Development Tools Module Suse Linux Enterprise=15-sp3
SUSE Development Tools Module Suse Linux Enterprise=15-sp4
SUSE Development Tools Module Suse Linux Enterprise=15-sp5
SUSE Development Tools Module Suse Linux Enterprise=15-sp6
SUSE Development Tools Module Suse Linux Enterprise=15-sp7
SUSE Legacy Module Suse Linux Enterprise=15-sp7
SUSE Linux Enterprise Desktop=11-sp4
SUSE Linux Enterprise Desktop=12-sp4
SUSE Linux Enterprise Desktop=15-sp1
SUSE Linux Enterprise Desktop=15-sp2
SUSE Linux Enterprise Desktop=15-sp3
SUSE Linux Enterprise Desktop=15-sp4
SUSE Linux Enterprise Desktop=15-sp5
SUSE Linux Enterprise Desktop=15-sp6
SUSE Linux Enterprise Desktop=15-sp7
SUSE Linux Enterprise High Availability Extension=15-sp4
SUSE Linux Enterprise High Availability Extension=15-sp6
SUSE Linux Enterprise High Availability Extension=15-sp7
SUSE Linux Enterprise High Availability Extension=16.0
SUSE Linux Enterprise High Performance Computing=15.0-sp1
SUSE Linux Enterprise High Performance Computing=15.0-sp1
SUSE Linux Enterprise High Performance Computing=15.0-sp1
SUSE Linux Enterprise High Performance Computing=15.0-sp2
SUSE Linux Enterprise High Performance Computing=15.0-sp2
SUSE Linux Enterprise High Performance Computing=15.0-sp2
SUSE Linux Enterprise High Performance Computing=15.0-sp3
SUSE Linux Enterprise High Performance Computing=15.0-sp3
SUSE Linux Enterprise High Performance Computing=15.0-sp3
SUSE Linux Enterprise High Performance Computing=15.0-sp4
SUSE Linux Enterprise High Performance Computing=15.0-sp4
SUSE Linux Enterprise High Performance Computing=15.0-sp4
SUSE Linux Enterprise High Performance Computing=15.0-sp5
SUSE Linux Enterprise High Performance Computing=15.0-sp5
SUSE Linux Enterprise High Performance Computing=15.0-sp5
SUSE Linux Enterprise High Performance Computing=15.0-sp6
SUSE Linux Enterprise High Performance Computing=15.0-sp7
SUSE Linux Enterprise Live Patching=12-sp5
SUSE Linux Enterprise Live Patching=15-sp4
SUSE Linux Enterprise Live Patching=15-sp5
SUSE Linux Enterprise Live Patching=15-sp6
SUSE Linux Enterprise Live Patching=15-sp7
SUSE Linux Enterprise Micro=5.0
SUSE Linux Enterprise Micro=5.1
SUSE Linux Enterprise Micro=5.2
SUSE Linux Enterprise Micro Rancher=5.2
SUSE Linux Enterprise Micro=5.3
SUSE Linux Enterprise Micro Rancher=5.3
SUSE Linux Enterprise Micro=5.4
SUSE Linux Enterprise Micro Rancher=5.4
SUSE Linux Enterprise Micro=5.5
SUSE Linux Enterprise Real Time=15.0-sp2
SUSE Linux Enterprise Real Time=15.0-sp3
SUSE Linux Enterprise Real Time=15.0-sp4
SUSE Linux Enterprise Real Time=15.0-sp5
SUSE Linux Enterprise Real Time=15.0-sp6
SUSE Linux Enterprise Real Time=15.0-sp7
SUSE Linux Enterprise Server=11-sp4
SUSE Linux Enterprise Server=11-sp4
SUSE Linux Enterprise Server=11-sp4
SUSE Linux Enterprise Server=12-sp4
SUSE Linux Enterprise Server Sap=12-sp4
SUSE Linux Enterprise Server=12-sp4
SUSE Linux Enterprise Server=12-sp4
SUSE Linux Enterprise Server=12-sp5
SUSE Linux Enterprise Server=12-sp5
SUSE Linux Enterprise Server=12-sp5
SUSE Linux Enterprise Server=15-sp1
SUSE Linux Enterprise Server Sap=15-sp1
SUSE Linux Enterprise Server=15-sp1
SUSE Linux Enterprise Server=15-sp1
SUSE Linux Enterprise Server=15-sp2
SUSE Linux Enterprise Server Sap=15-sp2
SUSE Linux Enterprise Server=15-sp2
SUSE Linux Enterprise Server=15-sp2
SUSE Linux Enterprise Server=15-sp3
SUSE Linux Enterprise Server Sap=15-sp3
SUSE Linux Enterprise Server=15-sp3
SUSE Linux Enterprise Server=15-sp3
SUSE Linux Enterprise Server=15-sp4
SUSE Linux Enterprise Server Sap=15-sp4
SUSE Linux Enterprise Server=15-sp4
SUSE Linux Enterprise Server=15-sp5
SUSE Linux Enterprise Server Sap=15-sp5
SUSE Linux Enterprise Server=15-sp5
SUSE Linux Enterprise Server=15-sp6
SUSE Linux Enterprise Server Sap=15-sp6
SUSE Linux Enterprise Server=15-sp6
SUSE Linux Enterprise Server=15-sp7
SUSE Linux Enterprise Server Sap=15-sp7
SUSE Linux Enterprise Server=16.0
SUSE Linux Enterprise Server Sap=16.0
SUSE Linux Enterprise Server=16.1
SUSE Linux Enterprise Server Sap=16.1
SUSE Linux Enterprise Workstation Extension=15-sp7
SUSE Linux Micro=6.0
SUSE Linux Micro=6.1
SUSE Linux Micro=6.2
SUSE Public Cloud Module Suse Linux Enterprise=15-sp6
SUSE Public Cloud Module Suse Linux Enterprise=15-sp7
SUSE Realtime Module Suse Linux Enterprise=15-sp3
SUSE Realtime Module Suse Linux Enterprise=15-sp4
SUSE Realtime Module Suse Linux Enterprise=15-sp5
SUSE Realtime Module Suse Linux Enterprise=15-sp6
SUSE Realtime Module Suse Linux Enterprise=15-sp7
NixOS NixOS<25.11
Arista Cloudvision Agni>=2024.4.0<=2025.2.2
Arista CloudVision Portal>=2024.2.0<=2026.1.0
Arista Velocloud Edge>=4.5.0<=6.4.1
Arista Velocloud Gateway
Arista VeloCloud Orchestrator
Arista Netvisor Os<7.1.0
Arista Netvisor Os=7.1.0
Arista Netvisor Os=7.1.0-hotfix7
All of the following
Siemens Simatic S7-1500 Cpu 1518-4 Pn\/dp Mfp Firmware>=3.1.5
Siemens Simatic S7-1500 Cpu 1518-4 Pn\/dp Mfp
All of the following
Siemens Simatic S7-1500 Cpu 1518f-4 Pn\/dp Mfp Firmware>=3.1.5
Siemens Simatic S7-1500 Cpu 1518f-4 Pn\/dp Mfp
All of the following
Siemens Siplus S7-1500 Cpu 1518-4 Pn\/dp Mfp Firmware>=3.1.5
Siemens Siplus S7-1500 Cpu 1518-4 Pn\/dp Mfp
All of the following
Siemens Simatic S7-1500 Tm Mfp Firmware
Siemens Simatic S7-1500 Tm Mfp
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=20.04
Canonical Ubuntu Linux=22.04
Canonical Ubuntu Linux=24.04
Canonical Ubuntu Linux=25.10
All of the following
Siemens Simatic Cn 4100 Firmware<6.0
Siemens SIMATIC CN 4100
Siemens Simatic Ax Runtime
All of the following
Any of the following
Siemens Simatic Hmi Unified Comfort Panels Firmware<21.0
Siemens Simatic Hmi Unified Comfort Panels Firmware=21.0
Siemens Simatic Hmi Unified Comfort Panels Firmware=21.0-update_1
Siemens Simatic Hmi Unified Comfort Panels Firmware=21.0-update_2
Any of the following
Siemens Simatic Hmi Mtp1000
Siemens Simatic Hmi Mtp1200
Siemens Simatic Hmi Mtp1500
Siemens Simatic Hmi Mtp1900
Siemens Simatic Hmi Mtp2200
Siemens Simatic Hmi Mtp700
All of the following
Siemens Simatic Iot2050 Advanced Firmware
Siemens Simatic Iot2050 Advanced
Siemens Simatic Ipc Ied-os
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.257-1Fixed in 6.1.170-3Fixed in 6.1.174-1Fixed in 6.12.86-1Fixed in 6.12.94-1Fixed in 7.0.12-2Fixed in 7.0.13-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.174-1~deb11u1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.137.1-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.12.85.1-1
Event History
Apr 22, 2026
CVE Published
via MITRE·08:15 AM
Data Sourced
via MITRE·08:15 AM
DescriptionSeverity
Data Sourced
via Red Hat·09:01 AM
DescriptionSeverityAffected Software
Data Sourced
via NVD·09:16 AM
RemedyDescriptionSeverityWeaknessAffected Software
Apr 23, 2026
Data Sourced
via Microsoft·08:05 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:05 AM
Affected Software
Updated
via Microsoft·08:05 AM
DescriptionSeverityWeakness
Apr 30, 2026
News Published
via The Register·12:01 AM
News Published
via The Register·12:04 AM
News Published
via BleepingComputer·01:54 PM
News Published
via BleepingComputer·01:56 PM
News Published
via Dark Reading·08:41 PM
May 1, 2026
Known Exploited
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
RemedyDescriptionAffected Software
May 4, 2026
News Published
via BleepingComputer·11:28 AM
May 5, 2026
News Published
via ZDNet·02:47 PM
News Published
via The Register·03:01 PM
May 6, 2026
News Published
via ZDNet·03:07 PM
May 12, 2026
News Published
via Dark Reading·09:06 PM
Jun 20, 2026
Data Sourced
via Ubuntu·07:46 PM
RemedyDescriptionSeverityAffected Software
Jun 21, 2026
Data Sourced
via Debian·07:48 PM
DescriptionAffected Software
Jul 8, 2026
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-31431?
The severity of CVE-2026-31431 is currently being assessed as it pertains to a change in operational procedure in the Linux kernel.
2
How do I fix CVE-2026-31431?
To fix CVE-2026-31431, ensure you are using a patched version of the Linux kernel that addresses this vulnerability.
3
What systems are affected by CVE-2026-31431?
CVE-2026-31431 affects systems running specific versions of the Linux kernel that utilize the algif_aead interface.
4
What are the potential impacts of CVE-2026-31431?
The potential impacts of CVE-2026-31431 include vulnerabilities related to the handling of cryptographic operations in the Linux kernel.
5
When was CVE-2026-31431 announced?
CVE-2026-31431 was announced following a reversion of a previous commit in the Linux kernel regarding cryptographic operations.