A vulnerability (CVE-2026-31431, CVSS 7.8 High) exists in the Linux kernel's crypto subsystem where the `algif_aead` interface incorrectly operates in-place, potentially leading to data corruption or other security impacts. Affected kernel versions are broad, including Linux kernel 4.14 through 5.10.253, 5.11 through 5.15.203, 5.16 through 6.1.169, 6.2 through 6.6.136, and 6.7 through 6.12.84. The fix requires updating to specific patched kernel versions such as 5.10.254, 5.15.204, 6.1.170, 6.6.137, or 6.12.85, followed by a system reboot.
Red Hat Product Errata RHSA-2026:13887 - Security Advisory Issued: 2026-05-05 Updated: 2026-05-05 RHSA-2026:13887 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2460538 - CVE-2026-31431 kernel: crypto: algif_aead - Revert to operating out-of-place CVEs CVE-2026-31431 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM kernel-6.12.0-55.71.1.el10_0.src.rpm SHA-256: 0992e634fa787c4de5a770fa56f2e93032b70d7105b7fe0d5934f1c8772777d5 x86_64 kernel-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: f75c8e2d9683953f7c290aa2ca66a68c23a1659c46ad6b8d2dee945ba28061dd kernel-abi-stablelists-6.12.0-55.71.1.el10_0.noarch.rpm SHA-256: 81aa002ace7b9245875301f530e0c37247914fba486582bd61c02be869b99775 kernel-core-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 063dc007c4c3c2d091a23ec79bb1f625415139599d9306d6200a8450233af47f kernel-debug-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 5d460de70fbfe7206b65d13d38929a73b367df187da7f2fff06add4622b989b7 kernel-debug-core-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: bc9c3eabb6629d21cecfb99c35d4063818f587f4e032d7f1ab65cc23983483fd kernel-debug-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: b4ea456f26e035cec6d6bacb7a2ea98b77e3e336171fd12cbab9bc2cbfc58e94 kernel-debug-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: b4ea456f26e035cec6d6bacb7a2ea98b77e3e336171fd12cbab9bc2cbfc58e94 kernel-debug-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: b4ea456f26e035cec6d6bacb7a2ea98b77e3e336171fd12cbab9bc2cbfc58e94 kernel-debug-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: b4ea456f26e035cec6d6bacb7a2ea98b77e3e336171fd12cbab9bc2cbfc58e94 kernel-debug-devel-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: f8f7f4f36707adcccf19b3c2e25b00da09f4922d3b539302a9dc1cf65c7c132a kernel-debug-devel-matched-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: da119c54987c99818f1088471ae85a4328dca5bd6436257a980856e06d8429ce kernel-debug-modules-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: ca7dc898e9bcd125a6081e98ca371b893622a083ac74908cd3b130556519fd35 kernel-debug-modules-core-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 355fc556dfeefacd2d6ea48a1477c6fed605a1bebac2209176a9a4dad237b6a4 kernel-debug-modules-extra-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 559fef6cdb378838ade5afbfca2f94a9ad0644a71d304e678da99ecef7675b98 kernel-debug-uki-virt-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: a3a3a78cc9b6cd75087a0201734e220e2a5c701ed19335f45c86b558b583ca18 kernel-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: ca2e0cf7c6774f6a11d8c6faa81f6d7a9cf9a0ce922c1cb1d1dd18f29a480998 kernel-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: ca2e0cf7c6774f6a11d8c6faa81f6d7a9cf9a0ce922c1cb1d1dd18f29a480998 kernel-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: ca2e0cf7c6774f6a11d8c6faa81f6d7a9cf9a0ce922c1cb1d1dd18f29a480998 kernel-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: ca2e0cf7c6774f6a11d8c6faa81f6d7a9cf9a0ce922c1cb1d1dd18f29a480998 kernel-debuginfo-common-x86_64-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: f90fe73b2683bcdb86c1c2be68f56ff31a01be2277a1d660369de243307df747 kernel-debuginfo-common-x86_64-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: f90fe73b2683bcdb86c1c2be68f56ff31a01be2277a1d660369de243307df747 kernel-debuginfo-common-x86_64-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: f90fe73b2683bcdb86c1c2be68f56ff31a01be2277a1d660369de243307df747 kernel-debuginfo-common-x86_64-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: f90fe73b2683bcdb86c1c2be68f56ff31a01be2277a1d660369de243307df747 kernel-devel-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 78b0a5a09eeceee9c9fbfa3c5d51a75f6556215152f3c6754d7576fe152f9ef0 kernel-devel-matched-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 4dfee83205fcdc0cbcda2aab7b720d6ad5245267dc5384323c7a1b174166287b kernel-doc-6.12.0-55.71.1.el10_0.noarch.rpm SHA-256: 8c5ffe01c40b77678da19ca51467e980a3218c34a555f302024fcae14bd8345f kernel-headers-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 472ef5a84ac73dd1005efedfbd10002e330414f0eb08deb5dbc521cd43aba7ed kernel-modules-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 40be31895b5a10692cdbd9ea1d5bf72605d19ae28d9791209ce9082bc4640646 kernel-modules-core-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 8940ee65d247270ded4a2cd7afe39bfa8f90454e95bbba6124cc0997eeac59f2 kernel-modules-extra-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: bfda22915769c4cc47a3d69527ee2859875f3a3de34b5d2643155dc866616830 kernel-rt-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 074d38e29d3122954cc2bc25639f5a609ec20b3c7c2765713e267d5a462495c7 kernel-rt-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 074d38e29d3122954cc2bc25639f5a609ec20b3c7c2765713e267d5a462495c7 kernel-rt-core-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 273dc2155961014662a6d14f44e7fd61bc7740b3bde0a72b3863527a688a5e3e kernel-rt-core-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 273dc2155961014662a6d14f44e7fd61bc7740b3bde0a72b3863527a688a5e3e kernel-rt-debug-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 074351ed191ae794648263f853fe51ef4cc5a7c18ad028927841488a5332a1a3 kernel-rt-debug-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 074351ed191ae794648263f853fe51ef4cc5a7c18ad028927841488a5332a1a3 kernel-rt-debug-core-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 1fc11d765e592dd29be917a2a9dd4e6e0434c306e74faa37cc69a603a2ce91a8 kernel-rt-debug-core-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 1fc11d765e592dd29be917a2a9dd4e6e0434c306e74faa37cc69a603a2ce91a8 kernel-rt-debug-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: de96929ae2407b0e18d292094548bf81e489419534fbffcae812a4cd2dcc9d92 kernel-rt-debug-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: de96929ae2407b0e18d292094548bf81e489419534fbffcae812a4cd2dcc9d92 kernel-rt-debug-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: de96929ae2407b0e18d292094548bf81e489419534fbffcae812a4cd2dcc9d92 kernel-rt-debug-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: de96929ae2407b0e18d292094548bf81e489419534fbffcae812a4cd2dcc9d92 kernel-rt-debug-devel-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: cf716a053ef7138feacde1fff17ddacaf4262d7630bc8663def4bda2406025df kernel-rt-debug-devel-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: cf716a053ef7138feacde1fff17ddacaf4262d7630bc8663def4bda2406025df kernel-rt-debug-kvm-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: fa365209e8d4d455b0ac2760b9e2995a6befa3b1237e282ec5bc0cfdd6cafdd7 kernel-rt-debug-modules-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 8fbaaf8351a4b2989cb3d8cd14adfab5181973d23261ebfbad9adcc005354b77 kernel-rt-debug-modules-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 8fbaaf8351a4b2989cb3d8cd14adfab5181973d23261ebfbad9adcc005354b77 kernel-rt-debug-modules-core-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 7fdf8df6a3d5bde2372e347f9d0daae4f4cffe0b005143b9f18f5750b5e9dc91 kernel-rt-debug-modules-core-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 7fdf8df6a3d5bde2372e347f9d0daae4f4cffe0b005143b9f18f5750b5e9dc91 kernel-rt-debug-modules-extra-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 75799b8f871f59be1ed3a018990c1232db01b519166a6337ede7939935dff507 kernel-rt-debug-modules-extra-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 75799b8f871f59be1ed3a018990c1232db01b519166a6337ede7939935dff507 kernel-rt-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 25b444cb007d1105620daef7a932beb44028b586cd3e89b99eebc8cca3677585 kernel-rt-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 25b444cb007d1105620daef7a932beb44028b586cd3e89b99eebc8cca3677585 kernel-rt-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 25b444cb007d1105620daef7a932beb44028b586cd3e89b99eebc8cca3677585 kernel-rt-debuginfo-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 25b444cb007d1105620daef7a932beb44028b586cd3e89b99eebc8cca3677585 kernel-rt-devel-6.12.0-55.71.1.el10_0.x86_64.rpm SHA-256: 762aa5fbafde6b2fd19229ed82eca780e438c6ed976c914da47bba2e6b591fe5 kernel-rt-devel-6.12.0-55.71.1.el10_