CVE-2026-31431

Adatlap

CVE: CVE-2026-31431
EUVD: EUVD-2026-24639
GHSA: GHSA-2274-3hgr-wxv6
Eszköztípus: IT +ICS
Publikálva: 2026. 04. 22. 10:15
Frissítve: 2026. 10. 15. 03:16
Súlyosság: Magas
Prioritás: Riasztás
CWE: CWE-1288 CWE-669

CVSS-pontszámok

Verzió	Pontszám	Súlyosság	Vektor
3.1	7,8	Magas	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
3.1	7,8	Magas	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Eredeti leírás

In the Linux kernel, the following vulnerability has been resolved:

crypto: algif_aead - Revert to operating out-of-place

This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.

There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.

Érintett termékek

Linux Linux Verziók: 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 – < 893d22e0135fa394db81df88697fba6032747667; 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 – < 19d43105a97be0810edbda875f2cd03f30dc130c; 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 – < 961cfa271a918ad4ae452420e7c303149002, 4.14; 0 – < 4.14; 5.10.254 – <= 5.10.*; 5.15.204 – <= 5.15.*; 6.1.170 – <= 6.1.*; 6.6.137 – <= 6.6.*; 6.12.85 – <= 6.12.*; 6.18.22 – <= 6.18.*; 6.19.12 – <= 6.19.*; 7.0 – <= *

Beszállítói termékekben is érintett

A CVE-rekord beszállítói kiegészítése szerint ezek a termékek beépítve tartalmazzák az érintett komponenst.

A beszállítói termékek megjelenítése (98 tétel)

SIMATIC AX Runtime Core Linux Common Debian Siemens Verziók: 0 – < *
SIMATIC AX Runtime Core Linux Common Debian arm64 Siemens Verziók: 0 – < *
SIMATIC AX Runtime Core Linux Platform Container Common Debian Development Siemens Verziók: 0 – < *
SIMATIC AX Runtime Core Linux VMWare Development Siemens Verziók: 0 – < *
SIMATIC CN 4100 Siemens Verziók: 0 – < V6.0
SIMATIC HMI MTP1000 Unified Basic Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1000 Unified Comfort Panel Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1000 Unified Comfort Panel hygienic Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1000, Unified Comfort Panel neutral Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1200 Unified Basic Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1200 Unified Comfort Panel Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1200 Unified Comfort Panel hygienic Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1200 Unified Comfort Panel neutral design Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1500 Unified Comfort Panel Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1500 Unified Comfort Panel hygienic Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1500 Unified Comfort Panel neutral design Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1900 Unified Comfort Panel Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1900 Unified Comfort Panel hygienic Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP1900 Unified Comfort Panel neutral design Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP2200 Unified Comfort Hygienic Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP2200 Unified Comfort Panel Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP2200 Unified Comfort Panel neutral design Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP400 Unified Basic Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP700 Unified Basic Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP700 Unified Comfort Panel Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC HMI MTP700, Unified Comfort Panel neutral design Siemens Verziók: 0 – < V21 Update 2 SR1
SIMATIC IoT2050 Advanced Siemens Verziók: 0 – < *
SIMATIC IPC Industrial Edge Device OS (IED-OS) Siemens Verziók: 0 – < *
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP Siemens Verziók: V3.1.6 – < V3.1.7, V3.1.5 – < *
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP Siemens Verziók: V3.1.6 – < V3.1.7, V3.1.5 – < *
SIMATIC S7-1500 TM MFP Siemens Verziók: 0 – < *
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem Siemens Verziók: 0 – < *
SIPLUS HMI MTP1000 Unified Basic Siemens Verziók: 0 – < V21 Update 2 SR1
SIPLUS HMI MTP1000 Unified Comfort Siemens Verziók: 0 – < V21 Update 2 SR1
SIPLUS HMI MTP1200 Unified Basic Siemens Verziók: 0 – < V21 Update 2 SR1
SIPLUS HMI MTP1200 Unified Comfort Siemens Verziók: 0 – < V21 Update 2 SR1
SIPLUS HMI MTP400 Unified Basic Siemens Verziók: 0 – < V21 Update 2 SR1
SIPLUS HMI MTP700 Unified Basic Siemens Verziók: 0 – < V21 SP2 Update 1
SIPLUS HMI MTP700 Unified Comfort Siemens Verziók: 0 – < V21 Update 2 SR1
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP Siemens Verziók: V3.1.6 – < V3.1.7, V3.1.5 – < *
NVIDIA for RHEL 10 Red Hat Verziók: 0:6.12.0-211.6.el10nv – < *; 0:6.12.0-231.12.el10nv – < *
Red Hat Enterprise Linux 10 Red Hat Verziók: 0:6.12.0-124.55.1.el10_1 – < *; 0:6.12.0-211.7.3.el10_2 – < *
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat Verziók: 0:6.12.0-55.71.1.el10_0 – < *
Red Hat Enterprise Linux 8 Red Hat Verziók: 0:4.18.0-553.123.1.rt7.464.el8_10 – < *, 0:4.18.0-553.123.1.el8_10 – < *
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Verziók: 0:4.18.0-305.190.1.el8_4 – < *
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Red Hat Verziók: 0:4.18.0-305.190.1.el8_4 – < *
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Verziók: 0:4.18.0-372.191.1.el8_6 – < *
Red Hat Enterprise Linux 8.6 Telecommunications Update Service Red Hat Verziók: 0:4.18.0-372.191.1.el8_6 – < *
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Red Hat Verziók: 0:4.18.0-372.191.1.el8_6 – < *
Red Hat Enterprise Linux 8.8 Telecommunications Update Service Red Hat Verziók: 0:4.18.0-477.139.1.el8_8 – < *
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Verziók: 0:4.18.0-477.139.1.el8_8 – < *
Red Hat Enterprise Linux 9 Red Hat Verziók: 0:5.14.0-611.54.1.el9_7 – < *; 0:5.14.0-687.5.3.el9_8 – < *
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Red Hat Verziók: 0:5.14.0-70.178.1.el9_0 – < *, 0:5.14.0-70.178.1.rt21.250.el9_0 – < *
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Red Hat Verziók: 0:5.14.0-284.169.1.el9_2 – < *, 0:5.14.0-284.169.1.rt14.454.el9_2 – < *
Red Hat Enterprise Linux 9.4 Extended Update Support Red Hat Verziók: 0:5.14.0-427.124.1.el9_4 – < *
Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat Verziók: 0:5.14.0-570.112.1.el9_6 – < *
Red Hat OpenShift Container Platform 4.12 Red Hat Verziók: 412.86.202605060316-0 – < *
Red Hat OpenShift Container Platform 4.13 Red Hat Verziók: 413.92.202605051442-0 – < *
Red Hat OpenShift Container Platform 4.14 Red Hat Verziók: 414.92.202605060243-0 – < *
Red Hat OpenShift Container Platform 4.15 Red Hat Verziók: 415.92.202605060220-0 – < *
Red Hat OpenShift Container Platform 4.16 Red Hat Verziók: 416.94.202605042300-0 – < *
Red Hat OpenShift Container Platform 4.17 Red Hat Verziók: 417.94.202605050021-0 – < *
Red Hat OpenShift Container Platform 4.18 Red Hat Verziók: 418.94.202605042017-0 – < *
Red Hat OpenShift Container Platform 4.19 Red Hat Verziók: 4.19.9.6.202605042214-0 – < *
Red Hat OpenShift Container Platform 4.20 Red Hat Verziók: 4.20.9.6.202605051409-0 – < *
Red Hat OpenShift Container Platform 4.21 Red Hat Verziók: 4.21.9.6.202605051105-0 – < *
Red Hat Enterprise Linux 6 Red Hat
Red Hat Enterprise Linux 7 Red Hat

Prioritás

Szint: Riasztás
Teendő: Azonnali intézkedés javasolt: a szoftvert 24 órán belül frissítse. Ha a frissítés nem telepíthető azonnal, alkalmazza a gyártó által javasolt kerülő megoldást, és a javításig fokozottan figyelje a sérülékenység kihasználására irányuló kísérleteket.

Kihasználási státusz

EPSS: 98,11%
Kihasználtság: Aktív
Kihasználás óta: 2026. 05. 01.
Automatizálhatóság: Nem
Technikai hatás: Teljes

Javítás

Javított verzió: 5.10.254, 5.15.204, 6.1.170, 6.6.137, 6.12.85, 6.18.22, 6.19.12, 7.0, V6.0, V21 Update 2 SR1, V3.1.7, V21 SP2 Update 1, 0:6.12.0-211.6.el10nv, 0:6.12.0-231.12.el10nv, 0:6.12.0-124.55.1.el10_1, 0:6.12.0-211.7.3.el10_2, 0:6.12.0-55.71.1.el10_0, 0:4.18.0-553.123.1.rt7.464.el8_10, 0:4.18.0-553.123.1.el8_10, 0:4.18.0-305.190.1.el8_4

+20 további
0:4.18.0-372.191.1.el8_6, 0:4.18.0-477.139.1.el8_8, 0:5.14.0-611.54.1.el9_7, 0:5.14.0-687.5.3.el9_8, 0:5.14.0-70.178.1.el9_0, 0:5.14.0-70.178.1.rt21.250.el9_0, 0:5.14.0-284.169.1.el9_2, 0:5.14.0-284.169.1.rt14.454.el9_2, 0:5.14.0-427.124.1.el9_4, 0:5.14.0-570.112.1.el9_6, 412.86.202605060316-0, 413.92.202605051442-0, 414.92.202605060243-0, 415.92.202605060220-0, 416.94.202605042300-0, 417.94.202605050021-0, 418.94.202605042017-0, 4.19.9.6.202605042214-0, 4.20.9.6.202605051409-0, 4.21.9.6.202605051105-0
Gyártói hivatkozás: Van patch vagy gyártói közlemény a hivatkozások között

Megoldás (CNA)

RHSA-2026:14926: NVIDIA for RHEL 10

RHSA-2026:33486: NVIDIA for RHEL 10

RHSA-2026:14097: Red Hat OpenShift Container Platform 4.12

RHSA-2026:14112: Red Hat OpenShift Container Platform 4.13

RHSA-2026:15087: Red Hat OpenShift Container Platform 4.14

RHSA-2026:14773: Red Hat OpenShift Container Platform 4.15

RHSA-2026:13729: Red Hat OpenShift Container Platform 4.16

RHSA-2026:13885: Red Hat OpenShift Container Platform 4.17

RHSA-2026:13727: Red Hat OpenShift Container Platform 4.18

RHSA-2026:13690: Red Hat OpenShift Container Platform 4.19

RHSA-2026:13862: Red Hat OpenShift Container Platform 4.20

RHSA-2026:13811: Red Hat OpenShift Container Platform 4.21

RHSA-2026:13887: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0), Red Hat Enterprise Linux Real Time EUS (v. 10.0), Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)

RHSA-2026:13566: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10)

RHSA-2026:19074: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10)

RHSA-2026:13936: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0)

RHSA-2026:13734: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)

RHSA-2026:13932: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4), Red Hat Enterprise Linux Real Time EUS (v.9.4), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4)

RHSA-2026:14339: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6), Red Hat Enterprise Linux Real Time EUS (v.9.6), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)

RHSA-2026:13565: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)

RHSA-2026:19225: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)

RHSA-2026:13577: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8)

RHSA-2026:15976: Red Hat Enterprise Linux BaseOS (v. 8)

RHSA-2026:14165: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)

RHSA-2026:14230: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS E4S (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.6)

RHSA-2026:16111: Red Hat Enterprise Linux BaseOS E4S (v.8.6)

RHSA-2026:13681: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)

RHSA-2026:16210: Red Hat Enterprise Linux BaseOS E4S (v.8.8)

RHSA-2026:16209: Red Hat Enterprise Linux BaseOS E4S (v.9.0)

RHSA-2026:16208: Red Hat Enterprise Linux BaseOS E4S (v.9.2)

RHSA-2026:16063: Red Hat Enterprise Linux BaseOS EUS (v.9.4)

RHSA-2026:16018: Red Hat Enterprise Linux BaseOS EUS (v.9.6)

RHSA-2026:15978: Red Hat Enterprise Linux BaseOS (v. 9)

RHSA-2026:13578: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8)

RHSA-2026:14137: Red Hat Enterprise Linux NFV E4S (v.9.0), Red Hat Enterprise Linux Real Time E4S (v.9.0)

RHSA-2026:14301: Red Hat Enterprise Linux Real Time E4S (v.9.2), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)

Kerülő megoldás (CNA)

See the security bulletin for a detailed mitigation procedure.