CVE-2026-31431HIGH· 7.8MITRENVD대응게시일: 2026. 04. 22.수정일: 2026. 07. 28.CNA: 416baaa9-dc9f-4396-8d5f-8c081fb06d67Analyzed
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reve
위협 신호 · CVSS · EPSS · KEV
즉시 패치· 실측 악용 확인 · KEV 등재
CVSS
7.8high
이론적 심각도 점수
EPSS
94.5%상위 0.2%
30일 내 악용 확률 예측
KEV
등재됨등재일 2026. 05. 01.
패치 기한 2026. 05. 15.
권장 대응 기한3일 이내+ 침해 포렌식CISA SSVC 기준
즉시 패치 + 침해 여부 포렌식 분석
KEV 악용자동화 가능완전 장악· KEV 등재 · 자동화 가능 · 완전 장악 · 내부 한정
CVSS 벡터 · 메트릭
악용 경로
공격 벡터로컬
공격 복잡도낮음
필요 권한낮음
사용자 상호작용불필요
범위불변
영향
기밀성 영향높음
무결성 영향높음
가용성 영향높음
버전별 점수
CVSS 3.17.8HIGH· 악용성 1.8· 영향도 5.9
CVSS 3.17.8HIGH· 악용성 1.8· 영향도 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H상세 설명
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.
AI 심층 분석
공격 시나리오 · 재현 가능한 PoC 페이로드 · 즉시 적용 가능한 차단 패치를 한 번에 받아 보세요. 보안 운영팀이 그대로 점검·티켓팅에 쓸 수 있는 형태로 정리해 드립니다.
영향받는 제품·버전
- linux linux_kernel4.14 - 5.10.254linux
- linux linux_kernel5.11 - 5.15.204linux
- linux linux_kernel5.16 - 6.1.170linux
- linux linux_kernel6.2 - 6.6.137linux
- linux linux_kernel6.7 - 6.12.85linux
- linux linux_kernel6.13 - 6.18.22linux
- linux linux_kernel6.19 - 6.19.12linux
- linux linux_kernellinux
- linux linux_kernellinux
- linux linux_kernellinux
- linux linux_kernellinux
- linux linux_kernellinux
- linux linux_kernellinux
- redhat openshift_container_platform4.12 - 4.12.89linux
- redhat openshift_container_platform4.13 - 4.13.66linux
- redhat openshift_container_platform4.14 - 4.14.65linux
- redhat openshift_container_platform4.15 - 4.15.64linux
- redhat openshift_container_platform4.16 - 4.16.61linux
- redhat openshift_container_platform4.17 - 4.17.53linux
- redhat openshift_container_platform4.18 - 4.18.40linux
- redhat openshift_container_platform4.19 - 4.19.30linux
- redhat openshift_container_platform4.20 - 4.20.21linux
- redhat openshift_container_platform4.21 - 4.21.14linux
- redhat openshift_container_platformlinux
- redhat enterprise_linuxlinux
- redhat enterprise_linuxlinux
- redhat enterprise_linuxlinux
- redhat enterprise_linux_auslinux
- redhat enterprise_linux_auslinux
- redhat enterprise_linux_euslinux
- redhat enterprise_linux_euslinux
- redhat enterprise_linux_euslinux
- redhat enterprise_linux_euslinux
- redhat enterprise_linux_tuslinux
- redhat enterprise_linux_tuslinux
- redhat enterprise_linux_update_services_for_sap_solutionslinux
- redhat enterprise_linux_update_services_for_sap_solutionslinux
- redhat enterprise_linux_update_services_for_sap_solutionslinux
- redhat enterprise_linux_update_services_for_sap_solutionslinux
- amazon amazon_linuxlinux
- canonical ubuntu_linuxlinux
- debian debian_linuxlinux
- debian debian_linuxlinux
- debian debian_linuxlinux
- opensuse leapother
- opensuse leapother
- opensuse leapother
- opensuse leapother
- suse caas_platformother
- suse enterprise_storageother
- suse enterprise_storageother
- suse enterprise_storageother
- suse manager_proxyother
- suse manager_proxyother
- suse manager_proxyother
- suse manager_proxyother
- suse manager_retail_branch_serverother
- suse manager_retail_branch_serverother
- suse manager_retail_branch_serverother
- suse manager_retail_branch_serverother
- suse manager_serverother
- suse manager_serverother
- suse manager_serverother
- suse manager_serverother
- suse openstack_cloudother
- suse openstack_cloud_crowbarother
- suse basesystem_modulelinux
- suse basesystem_modulelinux
- suse basesystem_modulelinux
- suse basesystem_modulelinux
- suse basesystem_modulelinux
- suse basesystem_modulelinux
- suse basesystem_modulelinux
- suse development_tools_modulelinux
- suse development_tools_modulelinux
- suse development_tools_modulelinux
- suse development_tools_modulelinux
- suse development_tools_modulelinux
- suse development_tools_modulelinux
- suse development_tools_modulelinux
- suse legacy_modulelinux
- suse linux_enterprise_desktoplinux
- suse linux_enterprise_desktoplinux
- suse linux_enterprise_desktoplinux
- suse linux_enterprise_desktoplinux
- suse linux_enterprise_desktoplinux
- suse linux_enterprise_desktoplinux
- suse linux_enterprise_desktoplinux
- suse linux_enterprise_desktoplinux
- suse linux_enterprise_desktoplinux
- suse linux_enterprise_high_availability_extensionlinux
- suse linux_enterprise_high_availability_extensionlinux
- suse linux_enterprise_high_availability_extensionlinux
- suse linux_enterprise_high_availability_extensionlinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_high_performance_computinglinux
- suse linux_enterprise_live_patchinglinux
- suse linux_enterprise_live_patchinglinux
- suse linux_enterprise_live_patchinglinux
- suse linux_enterprise_live_patchinglinux
- suse linux_enterprise_live_patchinglinux
- suse linux_enterprise_microlinux
- suse linux_enterprise_microlinux
- suse linux_enterprise_microlinux
- suse linux_enterprise_microlinux
- suse linux_enterprise_microlinux
- suse linux_enterprise_microlinux
- suse linux_enterprise_microlinux
- suse linux_enterprise_microlinux
- suse linux_enterprise_microlinux
- suse linux_enterprise_real_timelinux
- suse linux_enterprise_real_timelinux
- suse linux_enterprise_real_timelinux
- suse linux_enterprise_real_timelinux
- suse linux_enterprise_real_timelinux
- suse linux_enterprise_real_timelinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_serverlinux
- suse linux_enterprise_workstation_extensionlinux
- suse linux_microlinux
- suse linux_microlinux
- suse linux_microlinux
- suse public_cloud_modulelinux
- suse public_cloud_modulelinux
- suse realtime_modulelinux
- suse realtime_modulelinux
- suse realtime_modulelinux
- suse realtime_modulelinux
- suse realtime_modulelinux
- nixos nixos< 25.11other
- arista cloudvision_agni2024.4.0 - 2025.2.2other
- arista cloudvision_portal2024.2.0 - 2026.1.0other
- arista velocloud_edge4.5.0 - 6.4.1other
- arista velocloud_gatewayother
- arista velocloud_orchestratorother
- arista netvisor_os< 7.1.0other
- arista netvisor_osother
- arista netvisor_osother
- siemens simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware>= 3.1.5other
- siemens simatic_s7-1500_cpu_1518-4_pn\/dp_mfpother
- siemens simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware>= 3.1.5other
- siemens simatic_s7-1500_cpu_1518f-4_pn\/dp_mfpother
- siemens siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware>= 3.1.5other
- siemens siplus_s7-1500_cpu_1518-4_pn\/dp_mfpother
- siemens simatic_s7-1500_tm_mfp_firmware< 1.1other
- siemens simatic_s7-1500_tm_mfpother
- canonical ubuntu_linuxlinux
- canonical ubuntu_linuxlinux
- canonical ubuntu_linuxlinux
- canonical ubuntu_linuxlinux
- canonical ubuntu_linuxlinux
- canonical ubuntu_linuxlinux
- canonical ubuntu_linuxlinux
영향받는 구성 (CPE) 60
- linux linux_kernel≥ 4.14 < 5.10.254cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- linux linux_kernel 7.0cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
- linux linux_kernel 7.0cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
- linux linux_kernel 7.0cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
- linux linux_kernel 7.0cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
- linux linux_kernel 7.0cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
- linux linux_kernel 7.0cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
- redhat openshift_container_platform≥ 4.12 < 4.12.89cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*
- redhat openshift_container_platform 4.0cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
- redhat enterprise_linux 8.0cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- redhat enterprise_linux 9.0cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
- redhat enterprise_linux 10.0cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
- redhat enterprise_linux_aus 8.4cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:*
- redhat enterprise_linux_aus 8.6cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*
- redhat enterprise_linux_eus 8.4cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
- redhat enterprise_linux_eus 9.4cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*
- redhat enterprise_linux_eus 9.6cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:*
- redhat enterprise_linux_eus 10.0cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:*
- redhat enterprise_linux_tus 8.6cpe:2.3:o:redhat:enterprise_linux_tus:8.6:*:*:*:*:*:*:*
- redhat enterprise_linux_tus 8.8cpe:2.3:o:redhat:enterprise_linux_tus:8.8:*:*:*:*:*:*:*
- redhat enterprise_linux_update_services_for_sap_solutions 8.6cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*
- redhat enterprise_linux_update_services_for_sap_solutions 8.8cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:*
- redhat enterprise_linux_update_services_for_sap_solutions 9.0cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*
- redhat enterprise_linux_update_services_for_sap_solutions 9.2cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*
- amazon amazon_linuxcpe:2.3:o:amazon:amazon_linux:-:*:*:*:*:*:*:*
- canonical ubuntu_linuxcpe:2.3:o:canonical:ubuntu_linux:-:*:*:*:*:*:*:*
- debian debian_linux 11.0cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
- debian debian_linux 12.0cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
- debian debian_linux 13.0cpe:2.3:o:debian:debian_linux:13.0:*:*:*:*:*:*:*
- opensuse leap 15.3cpe:2.3:o:opensuse:leap:15.3:*:*:*:*:*:*:*
- opensuse leap 15.4cpe:2.3:o:opensuse:leap:15.4:*:*:*:*:*:*:*
- opensuse leap 15.5cpe:2.3:o:opensuse:leap:15.5:*:*:*:*:*:*:*
- opensuse leap 15.6cpe:2.3:o:opensuse:leap:15.6:*:*:*:*:*:*:*
- suse caas_platform 4.0cpe:2.3:a:suse:caas_platform:4.0:*:*:*:*:*:*:*
- suse enterprise_storage 6.0cpe:2.3:a:suse:enterprise_storage:6.0:*:*:*:*:*:*:*
- suse enterprise_storage 7.0cpe:2.3:a:suse:enterprise_storage:7.0:*:*:*:*:*:*:*
- suse enterprise_storage 7.1cpe:2.3:a:suse:enterprise_storage:7.1:*:*:*:*:*:*:*
- suse manager_proxy 4.0cpe:2.3:a:suse:manager_proxy:4.0:*:*:*:*:*:*:*
- suse manager_proxy 4.1cpe:2.3:a:suse:manager_proxy:4.1:*:*:*:*:*:*:*
- suse manager_proxy 4.2cpe:2.3:a:suse:manager_proxy:4.2:*:*:*:*:*:*:*
- suse manager_proxy 4.3cpe:2.3:a:suse:manager_proxy:4.3:*:*:*:*:*:*:*
- suse manager_retail_branch_server 4.0cpe:2.3:a:suse:manager_retail_branch_server:4.0:*:*:*:*:*:*:*
- suse manager_retail_branch_server 4.1cpe:2.3:a:suse:manager_retail_branch_server:4.1:*:*:*:*:*:*:*
- suse manager_retail_branch_server 4.2cpe:2.3:a:suse:manager_retail_branch_server:4.2:*:*:*:*:*:*:*
- suse manager_retail_branch_server 4.3cpe:2.3:a:suse:manager_retail_branch_server:4.3:*:*:*:*:*:*:*
- suse manager_server 4.0cpe:2.3:a:suse:manager_server:4.0:*:*:*:*:*:*:*
- suse manager_server 4.1cpe:2.3:a:suse:manager_server:4.1:*:*:*:*:*:*:*
- suse manager_server 4.2cpe:2.3:a:suse:manager_server:4.2:*:*:*:*:*:*:*
- suse manager_server 4.3cpe:2.3:a:suse:manager_server:4.3:*:*:*:*:*:*:*
- suse openstack_cloud 9.0cpe:2.3:a:suse:openstack_cloud:9.0:*:*:*:*:*:*:*
- suse openstack_cloud_crowbar 9.0cpe:2.3:a:suse:openstack_cloud_crowbar:9.0:*:*:*:*:*:*:*
- suse basesystem_module 15cpe:2.3:o:suse:basesystem_module:15:sp1:*:*:*:suse_linux_enterprise:*:*
- suse basesystem_module 15cpe:2.3:o:suse:basesystem_module:15:sp2:*:*:*:suse_linux_enterprise:*:*
- suse basesystem_module 15cpe:2.3:o:suse:basesystem_module:15:sp3:*:*:*:suse_linux_enterprise:*:*
- suse basesystem_module 15cpe:2.3:o:suse:basesystem_module:15:sp4:*:*:*:suse_linux_enterprise:*:*
- suse basesystem_module 15cpe:2.3:o:suse:basesystem_module:15:sp5:*:*:*:suse_linux_enterprise:*:*
- suse basesystem_module 15cpe:2.3:o:suse:basesystem_module:15:sp6:*:*:*:suse_linux_enterprise:*:*
- suse basesystem_module 15cpe:2.3:o:suse:basesystem_module:15:sp7:*:*:*:suse_linux_enterprise:*:*
- suse development_tools_module 15cpe:2.3:o:suse:development_tools_module:15:sp1:*:*:*:suse_linux_enterprise:*:*
- suse development_tools_module 15cpe:2.3:o:suse:development_tools_module:15:sp2:*:*:*:suse_linux_enterprise:*:*
참고 자료 126
- http://www.openwall.com/lists/oss-security/2026/04/29/23ExploitMailing ListPatch
- http://www.openwall.com/lists/oss-security/2026/04/29/25Mailing ListPatch
- http://www.openwall.com/lists/oss-security/2026/04/29/26ExploitMailing ListPatch
- http://www.openwall.com/lists/oss-security/2026/04/30/10Mailing ListPatch
- http://www.openwall.com/lists/oss-security/2026/04/30/11Mailing ListPatch
- http://www.openwall.com/lists/oss-security/2026/04/30/12Mailing ListPatch
- http://www.openwall.com/lists/oss-security/2026/04/30/14Mailing ListPatch
- http://www.openwall.com/lists/oss-security/2026/04/30/15Mailing ListPatch
- http://www.openwall.com/lists/oss-security/2026/04/30/16Mailing ListPatch
- http://www.openwall.com/lists/oss-security/2026/04/30/18ExploitMailing List
- http://www.openwall.com/lists/oss-security/2026/04/30/5ExploitMailing ListPatch
- https://copy.failExploit
- https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170ExploitThird Party Advisory
- https://www.kb.cert.org/vuls/id/260001Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:13565Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:13566Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:13577Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:13578Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:13681Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:13690Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:13727Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:13729Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:13734Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:13811Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:13862Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:13885Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:13887Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:13932Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:13936Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:14097Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:14112Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:14137Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:14165Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:14230Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:14301Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:14339Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:14773Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:14926Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:15087Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:15976Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:15978Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:16018Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:16063Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:16111Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:16208Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:16209Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:16210Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:19074Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:19225Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:33486Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-31431Third Party Advisory
- https://access.redhat.com/security/cve/cve-2026-31431#cve-details-mitigationThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2460538Issue TrackingThird Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-019113.htmlThird Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-082556.htmlThird Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-265688.htmlThird Party Advisory
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31431.jsonThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-31431US Government Resource
- https://xint.io/blog/copy-fail-linux-distributions#the-fix-6ExploitPatchThird Party Advisory
링크 내용 불러오는 중…