Skip to main content
CVE-2026-31431VulnerabilityPublished

Linux kernel cryptographic subsystem · Kwetsbaarheid Verholpen

Affects Nationaal Cyber Security Centrum DebianSource GCVE Database

0

Public exploit available (Metasploit).

Data as of 27 Oct 2026, 00:36 UTC

Severity
High

Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 1 May 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: evidence found.

    1 Metasploit module

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

AI-suggested

A fix has been applied to the Linux kernel to address this vulnerability. Users should update their Linux kernel to the latest patched version provided by their distribution, such as Debian. Since the vulnerability is fixed, no additional mitigation steps are indicated.

Description

A vulnerability has been fixed in the Linux kernel's cryptographic subsystem, specifically in the algif_aead crypto module. This issue was addressed by the Nationaal Cyber Security Centrum and affects Debian. Public exploit code is available via Metasploit, but there is no indication of exploitation in the wild. No CVSS score is provided for this vulnerability.

References

Community reviews

Loading reviews…