# CVE-2026-31790: Incorrect Failure Handling in RSA KEM RSASVE Encapsulation

CVE-2026-31790 is fixed in 23 products on 1 platform, first by RHSA-2026:71542, released March 12, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-31790
- Priority: High
- CVSS: 7.5 (Moderate)
- EPSS: 0.0105
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Apr 6, 2026
- Weakness: Improper Check for Unusual or Exceptional Conditions
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31790

## Description

This update for openssl-1_0_0 fixes the following issues:  - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL dereference when processing CMS KeyAgreeRecipientInfo (bsc#1260443). - CVE-2026-31789: Heap buffer overflow in hexadecimal conversion (bsc#1260444). - CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE encapsulation (bsc#1260445).

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | edk2 RHEL 10 | 20251114-5.el10_2.2 | [RHSA-2026:39297](https://patchblox.com/security/data/fix/linux/rhsa-2026-39297.md) | Apr 7, 2026 |
| Linux | edk2 rocky 10 | 0:20251114-5.el10_2.2 | [RLSA-2026:39297](https://patchblox.com/security/data/fix/linux/rlsa-2026-39297.md) | Jul 15, 2026 |
| Linux | edk2-aarch64 almalinux 10 | 20251114-5.el10_2.2 | [ALSA-2026:39297](https://patchblox.com/security/data/fix/linux/alsa-2026-39297.md) | Jul 14, 2026 |
| Linux | edk2-aarch64 ol 10 | 0:20251114-5.0.1.el10_2.2 | [ELSA-2026-39297](https://patchblox.com/security/data/fix/linux/elsa-2026-39297.md) | Jul 16, 2026 |
| Linux | edk2-ovmf almalinux 10 | 20251114-5.el10_2.2 | [ALSA-2026:39297](https://patchblox.com/security/data/fix/linux/alsa-2026-39297.md) | Jul 14, 2026 |
| Linux | edk2-ovmf ol 10 | 0:20251114-5.0.1.el10_2.2 | [ELSA-2026-39297](https://patchblox.com/security/data/fix/linux/elsa-2026-39297.md) | Jul 16, 2026 |
| Linux | edk2-tools almalinux 10 | 20251114-5.el10_2.2 | [ALSA-2026:39297](https://patchblox.com/security/data/fix/linux/alsa-2026-39297.md) | Jul 14, 2026 |
| Linux | edk2-tools ol 10 | 0:20251114-5.0.1.el10_2.2 | [ELSA-2026-39297](https://patchblox.com/security/data/fix/linux/elsa-2026-39297.md) | Jul 16, 2026 |
| Linux | edk2-tools-doc almalinux 10 | 20251114-5.el10_2.2 | [ALSA-2026:39297](https://patchblox.com/security/data/fix/linux/alsa-2026-39297.md) | Jul 14, 2026 |
| Linux | edk2-tools-doc ol 10 | 0:20251114-5.0.1.el10_2.2 | [ELSA-2026-39297](https://patchblox.com/security/data/fix/linux/elsa-2026-39297.md) | Jul 16, 2026 |
| Linux | libssl3 Ubuntu 22.04.1 LTS (jammy) | 3.0.2-0ubuntu1.23 | [libssl3 3.0.2-0ubuntu1.23](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libssl3-3.0.2-0ubuntu1.23.md) | Apr 15, 2026 |
| Linux | libssl3t64 Ubuntu 24.04.5 LTS (noble) | 3.0.13-0ubuntu3.9 | [libssl3t64 3.0.13-0ubuntu3.9](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libssl3t64-3.0.13-0ubuntu3.9.md) | Apr 15, 2026 |
| Linux | libssl3t64 Ubuntu 25.10 (questing) | 3.5.3-1ubuntu3.3 | [libssl3t64 3.5.3-1ubuntu3.3](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libssl3t64-3.5.3-1ubuntu3.3.md) | Apr 15, 2026 |
| Linux | libssl3t64 Ubuntu 26.04.1 LTS (resolute) | 3.5.5-1ubuntu3 | [libssl3t64 3.5.5-1ubuntu3](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libssl3t64-3.5.5-1ubuntu3.md) | Apr 6, 2026 |
| Linux | openssl Debian 12.15 (bookworm) | 3.0.19-1~deb12u2 | [DEBIAN-CVE-2026-31790](https://patchblox.com/security/data/fix/linux/debian-cve-2026-31790.md) | Apr 7, 2026 |
| Linux | openssl Debian 13.5 (trixie) | 3.5.5-1~deb13u2 | [DEBIAN-CVE-2026-31790](https://patchblox.com/security/data/fix/linux/debian-cve-2026-31790.md) | Apr 7, 2026 |
| Linux | openssl Debian 14 | 3.6.2-1 | [DEBIAN-CVE-2026-31790](https://patchblox.com/security/data/fix/linux/debian-cve-2026-31790.md) | Apr 7, 2026 |
| Linux | openssl RHEL 10 | 3.2.2-16.el10_0.7 | [RHSA-2026:71542](https://patchblox.com/security/data/fix/linux/rhsa-2026-71542.md) | Mar 12, 2026 |
| Linux | openssl RHEL 9 | 1:3.5.5-2.el9_8 | [RHSA-2026:19218](https://patchblox.com/security/data/fix/linux/rhsa-2026-19218.md) | May 27, 2026 |
| Linux | openssl Ubuntu 22.04.1 LTS (jammy) | 3.0.2-0ubuntu1.23 | [openssl 3.0.2-0ubuntu1.23](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-openssl-3.0.2-0ubuntu1.23.md) | Apr 15, 2026 |
| Linux | openssl Ubuntu 24.04.5 LTS (noble) | 3.0.13-0ubuntu3.9 | [openssl 3.0.13-0ubuntu3.9](https://patchblox.com/security/data/fix/linux/ubuntu-noble-openssl-3.0.13-0ubuntu3.9.md) | Apr 15, 2026 |
| Linux | openssl Ubuntu 25.10 (questing) | 3.5.3-1ubuntu3.3 | [openssl 3.5.3-1ubuntu3.3](https://patchblox.com/security/data/fix/linux/ubuntu-questing-openssl-3.5.3-1ubuntu3.3.md) | Apr 15, 2026 |
| Linux | openssl Ubuntu 26.04.1 LTS (resolute) | 3.5.5-1ubuntu3 | [openssl 3.5.5-1ubuntu3](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-openssl-3.5.5-1ubuntu3.md) | Apr 6, 2026 |
| Linux | openssl almalinux 10 | 1:3.5.5-2.el10_2.alma.1 | [ALSA-2026:19066](https://patchblox.com/security/data/fix/linux/alsa-2026-19066.md) | May 19, 2026 |
| Linux | openssl almalinux 9 | 1:3.5.5-2.el9_8 | [ALSA-2026:19218](https://patchblox.com/security/data/fix/linux/alsa-2026-19218.md) | May 19, 2026 |
| Linux | openssl amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl ol 10 | 1:3.5.5-2.0.1.el10_2 | [ELSA-2026-19066](https://patchblox.com/security/data/fix/linux/elsa-2026-19066.md) | Jul 8, 2026 |
| Linux | openssl ol 9 | 1:3.5.5-2.0.1.el9_8 | [ELSA-2026-19218](https://patchblox.com/security/data/fix/linux/elsa-2026-19218.md) | Jun 12, 2026 |
| Linux | openssl rocky 10 | 1:3.5.5-2.el10_2 | [RLSA-2026:19066](https://patchblox.com/security/data/fix/linux/rlsa-2026-19066.md) | May 29, 2026 |
| Linux | openssl rocky 9 | 1:3.5.5-2.el9_8 | [RLSA-2026:19218](https://patchblox.com/security/data/fix/linux/rlsa-2026-19218.md) | May 28, 2026 |
| Linux | openssl-1_0_0 opensuse-leap 15.6 | 1.0.2p-150000.3.105.1 | [SUSE-SU-2026:1291-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1291-1.md) | Apr 13, 2026 |
| Linux | openssl-1_0_0 sles 15.6 | 1.0.2p-150000.3.105.1 | [SUSE-SU-2026:1291-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1291-1.md) | Apr 13, 2026 |
| Linux | openssl-1_0_0 sles 15.7 | 1.0.2p-150000.3.105.1 | [SUSE-SU-2026:1291-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1291-1.md) | Apr 13, 2026 |
| Linux | openssl-3 opensuse-leap 15.6 | 3.1.4-150600.5.45.1 | [SUSE-SU-2026:1215-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1215-1.md) | Apr 8, 2026 |
| Linux | openssl-3 opensuse-leap 16.0 | 3.5.0-160000.7.1 | [OPENSUSE-SU-2026:20525-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20525-1.md) | Apr 13, 2026 |
| Linux | openssl-3 sles 15.6 | 3.1.4-150600.5.45.1 | [SUSE-SU-2026:1215-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1215-1.md) | Apr 8, 2026 |
| Linux | openssl-3 sles 15.7 | 3.2.3-150700.5.31.1 | [SUSE-SU-2026:1375-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1375-1.md) | Apr 15, 2026 |
| Linux | openssl-3 sles 16.0 | 3.5.0-160000.7.1 | [SUSE-SU-2026:21186-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-21186-1.md) | Apr 13, 2026 |
| Linux | openssl-debuginfo amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-debugsource amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-devel RHEL 9 | 1:3.5.5-2.el9_8 | [RHSA-2026:19218](https://patchblox.com/security/data/fix/linux/rhsa-2026-19218.md) | May 27, 2026 |
| Linux | openssl-devel almalinux 10 | 1:3.5.5-2.el10_2.alma.1 | [ALSA-2026:19066](https://patchblox.com/security/data/fix/linux/alsa-2026-19066.md) | May 19, 2026 |
| Linux | openssl-devel almalinux 9 | 1:3.5.5-2.el9_8 | [ALSA-2026:19218](https://patchblox.com/security/data/fix/linux/alsa-2026-19218.md) | May 19, 2026 |
| Linux | openssl-devel amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-devel ol 10 | 1:3.5.5-2.0.1.el10_2 | [ELSA-2026-19066](https://patchblox.com/security/data/fix/linux/elsa-2026-19066.md) | Jul 8, 2026 |
| Linux | openssl-devel ol 9 | 1:3.5.5-2.0.1.el9_8 | [ELSA-2026-19218](https://patchblox.com/security/data/fix/linux/elsa-2026-19218.md) | Jun 12, 2026 |
| Linux | openssl-fips-provider RHEL 10 | 3.0.7-11.el10_0 | [RHSA-2026:27745](https://patchblox.com/security/data/fix/linux/rhsa-2026-27745.md) | Apr 7, 2026 |
| Linux | openssl-fips-provider RHEL 9 | 0:3.0.7-11.el9_8 | [RHSA-2026:27744](https://patchblox.com/security/data/fix/linux/rhsa-2026-27744.md) | Jun 24, 2026 |
| Linux | openssl-fips-provider ol 10 | 0:3.0.7-11.0.1.el10_2 | [ELSA-2026-27746](https://patchblox.com/security/data/fix/linux/elsa-2026-27746.md) | Sep 16, 2026 |
| Linux | openssl-fips-provider ol 9 | 0:3.0.7-11.0.1.el9_8 | [ELSA-2026-27744](https://patchblox.com/security/data/fix/linux/elsa-2026-27744.md) | Aug 28, 2026 |
| Linux | openssl-fips-provider-latest amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-fips-provider-latest-debuginfo amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-fips-provider-so RHEL 9 | 0:3.0.7-11.el9_8 | [RHSA-2026:27744](https://patchblox.com/security/data/fix/linux/rhsa-2026-27744.md) | Jun 24, 2026 |
| Linux | openssl-fips-provider-so ol 10 | 0:3.0.7-11.0.1.el10_2 | [ELSA-2026-27746](https://patchblox.com/security/data/fix/linux/elsa-2026-27746.md) | Sep 16, 2026 |
| Linux | openssl-fips-provider-so ol 9 | 0:3.0.7-11.0.1.el9_8 | [ELSA-2026-27744](https://patchblox.com/security/data/fix/linux/elsa-2026-27744.md) | Aug 28, 2026 |
| Linux | openssl-libs RHEL 9 | 1:3.5.5-2.el9_8 | [RHSA-2026:19218](https://patchblox.com/security/data/fix/linux/rhsa-2026-19218.md) | May 27, 2026 |
| Linux | openssl-libs almalinux 10 | 1:3.5.5-2.el10_2.alma.1 | [ALSA-2026:19066](https://patchblox.com/security/data/fix/linux/alsa-2026-19066.md) | May 19, 2026 |
| Linux | openssl-libs almalinux 9 | 1:3.5.5-2.el9_8 | [ALSA-2026:19218](https://patchblox.com/security/data/fix/linux/alsa-2026-19218.md) | May 19, 2026 |
| Linux | openssl-libs amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-libs ol 10 | 1:3.5.5-2.0.1.el10_2 | [ELSA-2026-19066](https://patchblox.com/security/data/fix/linux/elsa-2026-19066.md) | Jul 8, 2026 |
| Linux | openssl-libs ol 9 | 1:3.5.5-2.0.1.el9_8 | [ELSA-2026-19218](https://patchblox.com/security/data/fix/linux/elsa-2026-19218.md) | Jun 12, 2026 |
| Linux | openssl-libs-debuginfo amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-perl RHEL 9 | 1:3.5.5-2.el9_8 | [RHSA-2026:19218](https://patchblox.com/security/data/fix/linux/rhsa-2026-19218.md) | May 27, 2026 |
| Linux | openssl-perl almalinux 10 | 1:3.5.5-2.el10_2.alma.1 | [ALSA-2026:19066](https://patchblox.com/security/data/fix/linux/alsa-2026-19066.md) | May 19, 2026 |
| Linux | openssl-perl almalinux 9 | 1:3.5.5-2.el9_8 | [ALSA-2026:19218](https://patchblox.com/security/data/fix/linux/alsa-2026-19218.md) | May 19, 2026 |
| Linux | openssl-perl amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-perl ol 10 | 1:3.5.5-2.0.1.el10_2 | [ELSA-2026-19066](https://patchblox.com/security/data/fix/linux/elsa-2026-19066.md) | Jul 8, 2026 |
| Linux | openssl-perl ol 9 | 1:3.5.5-2.0.1.el9_8 | [ELSA-2026-19218](https://patchblox.com/security/data/fix/linux/elsa-2026-19218.md) | Jun 12, 2026 |
| Linux | openssl-provider-legacy Ubuntu 25.10 (questing) | 3.5.3-1ubuntu3.3 | [openssl-provider-legacy 3.5.3-1ubuntu3.3](https://patchblox.com/security/data/fix/linux/ubuntu-questing-openssl-provider-legacy-3.5.3-1ubuntu3.3.md) | Apr 15, 2026 |
| Linux | openssl-provider-legacy Ubuntu 26.04.1 LTS (resolute) | 3.5.5-1ubuntu3 | [openssl-provider-legacy 3.5.5-1ubuntu3](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-openssl-provider-legacy-3.5.5-1ubuntu3.md) | Apr 6, 2026 |
| Linux | openssl-snapsafe-libs amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-snapsafe-libs-debuginfo amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.