Mitel Product Security Advisory MISA-2026-0003

In April 2026, a local privilege escalation vulnerability in Linux Kernels was publicly disclosed.

A Local Privilege Escalation Vulnerability, CVE-2026-31431, has been identified in the algif_aead cryptographic algorithm interface of the Kernel of multiple major Linux distributions, which if successfully exploited, could allow an authenticated attacker with local access to a vulnerable system to conduct local privilege escalation due to part of the Linux kernel's cryptographic interface containing an incorrect in-place operation, where source and destination data mappings differ.

The vulnerability severity is rated as high, based on the assessment provided in the CVE record.

Mitel is actively investigating the impact of CVE‑2026‑31431 on our products and will provide updates as more information becomes available.

This vulnerability requires authenticated local access to a vulnerable system and allows an unprivileged user to escalate privileges to root. It does not provide a direct remote attack vector.

Mitel is actively investigating the impact of CVE‑2026‑31431 on Mitel software and hardware appliances that ship with embedded Linux operating systems or Linux Kernel. Mitel will provide updates as more information becomes available.  

For Mitel applications that are installed on a Linux operating system that is not embedded within the product, Mitel does not provide guidance for the operating system and customers should follow the instructions of the Linux operating system provider. Mitel will not deliver updates for these Linux operating systems.

Windows-based products are not affected by this vulnerability. No action is required for systems running on Microsoft Windows.

Product statements are related only to supported product versions. Products which have reached End of Support status are not considered.

This security advisory provides information on the following products:

Platforms, Solutions and Gateways:

Applications:

Devices:

This section will be updated as Mitel’s investigation continues.

The vulnerability is rated as high severity, based on the assessment provided in the CVE record.

Mitel is actively investigating the impact of CVE‑2026‑31431 on our products and will provide updates as more information becomes available.

Please see Mitel Security Knowledge Base article KB000127609, “Linux Kernel Local Privilege Escalation Vulnerability "Copy Fail" Security Update, CVE-2026-3143133)” 

CVE‑2026‑31431