جزئیات آسیب‌پذیری

CVE-2026-31431

بهره‌برداری فعال
Linux LinuxSiemens SIMATIC AX Runtime Core Linux Common DebianSiemens SIMATIC AX Runtime Core Linux Common Debian arm64Siemens SIMATIC AX Runtime Core Linux Platform Container Common Debian DevelopmentSiemens SIMATIC AX Runtime Core Linux VMWare DevelopmentSiemens SIMATIC CN 4100

crypto: algif_aead - Revert to operating out-of-place

CVSS 3.1
7.8بالا
نمای کلی اکسپلویت‌های عمومی اخبار مرتبط خط زمانی

خلاصه‌ی فارسی

خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.

شرح رسمی (انگلیسی)

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.8بالا 3.1 CVEProject cvelistV5 (CNA) (Linux) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8بالا 3.1 CVEProject cvelistV5 (CNA) (redhat-SADP) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Linux Linux 4.14 CVEProject cvelistV5 (CNA)
Linux Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 ≤ v < 19d43105a97be0810edbda875f2cd03f30dc130c CVEProject cvelistV5 (CNA)
Linux Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 ≤ v < 961cfa271a918ad4ae452420e7c303149002875b CVEProject cvelistV5 (CNA)
Linux Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 ≤ v < 3115af9644c342b356f3f07a4dd1c8905cd9a6fc CVEProject cvelistV5 (CNA)
Linux Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 ≤ v < 8b88d99341f139e23bdeb1027a2a3ae10d341d82 CVEProject cvelistV5 (CNA)
Linux Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 ≤ v < fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8 CVEProject cvelistV5 (CNA)
Linux Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 ≤ v < ce42ee423e58dffa5ec03524054c9d8bfd4f6237 CVEProject cvelistV5 (CNA)
Linux Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 ≤ v < a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5 CVEProject cvelistV5 (CNA)
Linux Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 ≤ v < 893d22e0135fa394db81df88697fba6032747667 CVEProject cvelistV5 (CNA)
Siemens SIMATIC AX Runtime Core Linux Common Debian همه CVEProject cvelistV5 (CNA)
Siemens SIMATIC AX Runtime Core Linux Common Debian arm64 همه CVEProject cvelistV5 (CNA)
Siemens SIMATIC AX Runtime Core Linux Platform Container Common Debian Development همه CVEProject cvelistV5 (CNA)
Siemens SIMATIC AX Runtime Core Linux VMWare Development همه CVEProject cvelistV5 (CNA)
Siemens SIMATIC CN 4100 v < V6.0 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1000 Unified Basic v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1000 Unified Comfort Panel v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1000, Unified Comfort Panel neutral v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1200 Unified Basic v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1200 Unified Comfort Panel v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1200 Unified Comfort Panel neutral design v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1500 Unified Comfort Panel v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1500 Unified Comfort Panel neutral design v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1900 Unified Comfort Panel v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1900 Unified Comfort Panel hygienic v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP1900 Unified Comfort Panel neutral design v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP2200 Unified Comfort Hygienic v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP2200 Unified Comfort Panel v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP2200 Unified Comfort Panel neutral design v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP400 Unified Basic v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP700 Unified Basic v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP700, Unified Comfort Panel neutral design v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC HMI MTP700 Unified Comfort Panel v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIMATIC IPC Industrial Edge Device OS (IED-OS) همه CVEProject cvelistV5 (CNA)
Siemens SIMATIC IoT2050 Advanced همه CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP V3.1.5 ≤ v CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP V3.1.5 ≤ v CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP V3.1.6 ≤ v < V3.1.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP V3.1.6 ≤ v < V3.1.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP V3.1.5 ≤ v CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP V3.1.5 ≤ v CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP V3.1.6 ≤ v < V3.1.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP V3.1.6 ≤ v < V3.1.7 CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1500 TM MFP همه CVEProject cvelistV5 (CNA)
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem همه CVEProject cvelistV5 (CNA)
Siemens SIPLUS HMI MTP1000 Unified Basic v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIPLUS HMI MTP1000 Unified Comfort v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIPLUS HMI MTP1200 Unified Basic v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIPLUS HMI MTP1200 Unified Comfort v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIPLUS HMI MTP400 Unified Basic v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIPLUS HMI MTP700 Unified Basic v < V21 SP2 Update 1 CVEProject cvelistV5 (CNA)
Siemens SIPLUS HMI MTP700 Unified Comfort v < V21 Update 2 SR1 CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP V3.1.5 ≤ v CVEProject cvelistV5 (CNA)
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP V3.1.6 ≤ v < V3.1.7 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱۲۷

اطلاعات

تاریخ انتشار
۱۴۰۵/۰۲/۰۲
آخرین به‌روزرسانی
۱۴۰۵/۰۷/۲۳
وضعیت
PUBLISHED
صادرکننده (CNA)
Linux
اولویت کلون
به‌زودی

فهرست KEV آژانس CISA

تاریخ افزوده‌شدن
۱۴۰۵/۰۲/۱۱
مهلت رفع
۱۴۰۵/۰۲/۲۵
استفاده در باج‌افزار
نامشخص

پیش‌بینی بهره‌برداری (EPSS)

۹۸٫۱۱٪
احتمال بهره‌برداری در ۳۰ روز
۹۹٫۹٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

Automatable
no
Exploitation
active
Technical Impact
total

ضعف‌ها (CWE)

  • CWE-669
    Incorrect Resource Transfer Between Spheres
  • CWE-1288
    Improper Validation of Consistency within Input