Privilege escalation affecting the Linux kernel

The Linux kernel is the central component of the operating system, responsible for managing hardware resources, memory, and communication between software and hardware. This system is affected by a vulnerability labeled CVE-2026-31431 resulting from a logical flaw within the algif_aead cryptographic module, linked to inadequate management of in-place operations. This flaw allows data to be manipulated in memory and injected into the page cache of a setuid executable file. Exploitation of this vulnerability would allow an authenticated malicious actor to corrupt an in-memory binary allowing them to perform privilege escalation up to the root level. It is classified high with a severity score of 7.8 according to CVSS V3.1.

• Linux kernel versions 4.14 and later except versions 6.18.22, 6.19.12 and 7.0;