Live › vulnerability › CVE-2026-31431
Go to dashboardThe Linux kernel has an incorrect resource transfer between spheres flaw that allows privilege escalation. A local user with access to the machine can gain higher privileges, such as root, by abusing it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 5h before NVD. All times on this page are UTC.
"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| linux kernel | vendor | >= 4.14, < 5.10.254 | 5.10.254 |
| linux kernel | vendor | >= 5.11, < 5.15.204 | 5.15.204 |
| linux kernel | vendor | >= 5.16, < 6.1.170 | 6.1.170 |
| linux kernel | vendor | >= 6.2, < 6.6.137 | 6.6.137 |
| linux kernel | vendor | >= 6.7, < 6.12.85 | 6.12.85 |
| linux kernel |
| vendor |
| >= 6.13, < 6.18.22 |
| 6.18.22 |
| linux kernel | vendor | >= 6.19, < 6.19.12 | 6.19.12 |
| linux kernel | vendor | = 7.0 | – |
| redhat openshift container platform | vendor | >= 4.12, < 4.12.89 | 4.12.89 |
| redhat openshift container platform | vendor | >= 4.13, < 4.13.66 | 4.13.66 |
| redhat openshift container platform | vendor | >= 4.14, < 4.14.65 | 4.14.65 |
| redhat openshift container platform | vendor | >= 4.15, < 4.15.64 | 4.15.64 |
| redhat openshift container platform | vendor | >= 4.16, < 4.16.61 | 4.16.61 |
| redhat openshift container platform | vendor | >= 4.17, < 4.17.53 | 4.17.53 |
| redhat openshift container platform | vendor | >= 4.18, < 4.18.40 | 4.18.40 |
| redhat openshift container platform | vendor | >= 4.19, < 4.19.30 | 4.19.30 |
| redhat openshift container platform | vendor | >= 4.20, < 4.20.21 | 4.20.21 |
| redhat openshift container platform | vendor | >= 4.21, < 4.21.14 | 4.21.14 |
| redhat openshift container platform | vendor | = 4.0 | – |
| redhat enterprise linux | vendor | = 8.0 | – |
| redhat enterprise linux | vendor | = 9.0 | – |
| redhat enterprise linux | vendor | = 10.0 | – |
| redhat enterprise linux aus | vendor | = 8.4 | – |
| redhat enterprise linux aus | vendor | = 8.6 | – |
| redhat enterprise linux eus | vendor | = 8.4 | – |
| redhat enterprise linux eus | vendor | = 9.4 | – |
| redhat enterprise linux eus | vendor | = 9.6 | – |
| redhat enterprise linux eus | vendor | = 10.0 | – |
| redhat enterprise linux tus | vendor | = 8.6 | – |
| redhat enterprise linux tus | vendor | = 8.8 | – |
| redhat enterprise linux update services for sap solutions | vendor | = 8.6 | – |
| redhat enterprise linux update services for sap solutions | vendor | = 8.8 | – |
| redhat enterprise linux update services for sap solutions | vendor | = 9.0 | – |
| redhat enterprise linux update services for sap solutions | vendor | = 9.2 | – |
| amazon linux | vendor | – | – |
| canonical ubuntu linux | vendor | – | – |
| debian linux | vendor | = 11.0 | – |
| debian linux | vendor | = 12.0 | – |
| debian linux | vendor | = 13.0 | – |
| opensuse leap | vendor | = 15.3 | – |
| Linux Kernel | vendor | – | – |
Unknown from the sources.
Apply the vendor kernel mitigations or update to a fixed kernel build from your distribution; CISA says to follow vendor instructions or discontinue use if mitigations are unavailable.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of the associated data.
There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
This page as .md · .json · in your agent: get_signal("CVE-2026-31431")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.