CVE-2026-31431: 
Docker Schwachstellenanalyse und -minderung

In the Linux kernel, the following vulnerability has been resolved:

crypto: algif_aead - Revert to operating out-of-place

This mostly reverts commit 72548b093ee3 except for the copying of the associated data.

There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Wiz Threat Research note: Wiz Research has increased the severity of this vulnerability to high in order for it to create graph findings. Wiz has implemented an OVAL check that specifically validates the presence of an explicit install algif_aead /bin/false directive in modprobe configuration files. However, this check does not account for alternative scenarios, such as systems where the algif_aead module is not present (e.g., minimal or hardened kernels), or where the module is disabled through other mechanisms like blacklist algif_aead entries or kernel boot parameters.