Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - limit RX SG extraction by receive buffer budget Make af_alg_get_rsgl() limit each RX scatterlist extraction to the remaining receive buffer budget. af_alg_get_rsgl() currently uses af_alg_readable() only as a gate before extracting data into the RX scatterlist. Limit each extraction to the remaining af_alg_rcvbuf(sk) budget so that receive-side accounting matches the amount of data attached to the request. If skcipher cannot obtain enough RX space for at least one chunk while more data remains to be processed, reject the recvmsg call instead of rounding the request length down to zero.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-25 | 2 | General1Patch1 |
| 2026-04-26 | 1 | Patch1 |
CVE-2026-31677 In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - limit RX SG extraction by receive buffer budget Make af_alg_get_rsgl() limit ea… https://www.cve.org/CVERecord?id=CVE-2026-31677
Post summary
CVE‑2026‑31677, a flaw in the Linux kernel’s af_alg module, has been fixed by limiting RX SG extraction, with no signs of active exploitation reported.
🪟 Linux kernel CVE in AF_ALG crypto sockets = the “not Windows” vulnerability that still hits your WSL/containers. Patch anyway: crypto bugs don’t care which OS you brag about. #Windows #WSL #Security https://windowsforum.com/threads/cve-2026-31677-af_alg-linux-crypto-bug-what-windows-wsl-admins-should-patch.415298/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #LinuxKernel #KernelCrypto #WslPatching #AfAlgSecurity https://t.co/hdU12ArLiq
Post summary
The tweet highlights that CVE‑2026‑31677, an AF_ALG crypto socket flaw, still impacts WSL/containers and urges readers to apply patches.
CVE-2026-31677 Linux Kernel Cryptography Receive Buffer Budget Limitation in af_alg https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31677
Post summary
The post simply cites CVE‑2026‑31677 with a link to a vulnerability database, offering no additional technical, PoC, or mitigation information.
8 of 8 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |