CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Linux Kernel algif_aead In-place Operation Vulnerability Leading to Local Privilege Escalation (CVE-2026-31431)
[Affected Scope] Systems running Linux kernel with the `algif_aead` crypto subsystem module enabled.
[Impact] A local attacker can exploit this vulnerability to cause kernel memory corruption, potentially leading to local privilege escalation (LPE) to root or system instability (Kernel Panic).
[Mitigation] Apply the latest stable kernel updates from your distribution or disable the `algif_aead` socket module if not required.
Linux Kernel af_alg_sendmsg Race Condition Vulnerability Advisory (CVE-2025-39964)
[Affected Scope] All systems and services utilizing the Linux Kernel Crypto API (AF_ALG) interface.
[Impact] Internal socket state inconsistency and potential Denial of Service (DoS) due to concurrent write operations.
[Mitigation] Update to the latest stable kernel version provided by your distribution and reboot.