FlawAtlas
Search the atlas
USN-8280-1 Not scored

linux, linux-aws, linux-aws-fips, linux-bluefield, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities

It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Packet sockets; - TLS protocol; (CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078)

Exploit probability Not scored
Published May 19, 2026
Required by Not available
Last source change July 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:Pro:18.04:LTS linux-gcp-5.4

108 explicit affected versions

Ubuntu:Pro:18.04:LTS linux-ibm-5.4

76 explicit affected versions

Ubuntu:Pro:18.04:LTS linux-oracle-5.4

107 explicit affected versions

Ubuntu:Pro:20.04:LTS linux

129 explicit affected versions

Ubuntu:Pro:20.04:LTS linux-aws

120 explicit affected versions

Ubuntu:Pro:20.04:LTS linux-bluefield

77 explicit affected versions

Ubuntu:Pro:20.04:LTS linux-gcp

121 explicit affected versions

Ubuntu:Pro:20.04:LTS linux-ibm

86 explicit affected versions

Ubuntu:Pro:20.04:LTS linux-kvm

116 explicit affected versions

Ubuntu:Pro:20.04:LTS linux-oracle

118 explicit affected versions

Ubuntu:Pro:20.04:LTS linux-xilinx-zynqmp

53 explicit affected versions

Ubuntu:Pro:FIPS-updates:20.04:LTS linux-aws-fips

73 explicit affected versions

Ubuntu:Pro:FIPS-updates:20.04:LTS linux-fips

88 explicit affected versions

Ubuntu:Pro:FIPS-updates:20.04:LTS linux-gcp-fips

74 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities USN-8280-1

It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Packet sockets; - TLS protocol; (CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078)

View original source

05 / REFERENCES

Further evidence