Linux Kernel Crypto Subsystem Vulnerability Allows Local Privilege Escalation
A use-after-free vulnerability in the Linux Kernel's crypto subsystem, CVE-2026-31719, allows local attackers to escalate privileges.
A critical use-after-free vulnerability has been identified within the Linux Kernel's crypto subsystem, enabling local attackers to escalate their privileges on affected systems. The vulnerability, tracked as CVE-2026-31719, requires an attacker to first gain the ability to execute low-privileged code on the target machine before it can be exploited.
The specific flaw resides in the kernel's handling of asynchronous AEAD (Authenticated Encryption with Associated Data) requests. Researchers at Zero Day Initiative discovered that the subsystem fails to properly validate the existence of an object before performing operations on it. This oversight can lead to a use-after-free condition, where the kernel attempts to access memory that has already been deallocated.
Successful exploitation of this vulnerability allows an attacker to escalate privileges to the kernel level, granting them the ability to execute arbitrary code with the highest level of system permissions. This could lead to a complete compromise of the affected Linux system.
Zero Day Initiative has assigned this vulnerability a CVSS score of 8.8, classifying it as high severity. The disclosure timeline indicates that the vulnerability was reported to the vendor on April 22, 2026, with a coordinated public release of the advisory on September 14, 2026. An update to the advisory was also published on the same day.
Linux has since issued an update to address this vulnerability. A commit on the official Linux kernel repository, specifically commit 3fbf5f0a99c991769ec562721285df7ab69240b, details the fix. This commit likely involves adding the necessary validation checks to ensure objects are properly managed before operations are performed.
The vulnerability was discovered and reported by Juefei Pu and Frank Wu, who are credited for their work in identifying and disclosing this security flaw. Their research highlights the ongoing need for rigorous security auditing of core system components like the Linux kernel.
This discovery underscores the persistent threat of privilege escalation vulnerabilities within operating system kernels. Attackers continuously seek such flaws to gain deeper access to systems, making timely patching and robust security practices essential for all users and organizations running Linux.