Dashboard / CVE-2026-31431

CVE-2026-31431

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.

CISA Known Exploited Vulnerability

Vendor / Product Linux — Kernel
Date Added 2026-05-01
Remediation Due 2026-05-15
https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/; https://xint.io/blog/copy-fail-linux-distributions#the-fix-6 ; https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/ ; https://nvd.nist.gov/vuln/detail/CVE-2026-31431

Weakness Classification (2)

Affected Software (207)

VendorProductVersion
amazon amazon_linux -
arista cloudvision_agni 2024.4.0 – 2025.2.2
arista cloudvision_portal 2024.2.0 – 2026.1.0
arista netvisor_os < 7.1.0
arista netvisor_os 7.1.0
arista netvisor_os 7.1.0
arista velocloud_edge 4.5.0 – 6.4.1
arista velocloud_gateway -
arista velocloud_orchestrator -
canonical ubuntu_linux -
canonical ubuntu_linux 14.04
canonical ubuntu_linux 16.04
canonical ubuntu_linux 18.04
canonical ubuntu_linux 20.04
canonical ubuntu_linux 22.04
canonical ubuntu_linux 24.04
canonical ubuntu_linux 25.10
debian debian_linux 11.0
debian debian_linux 12.0
debian debian_linux 13.0
linux linux_kernel 4.14 – 5.10.254
linux linux_kernel 5.11 – 5.15.204
linux linux_kernel 5.16 – 6.1.170
linux linux_kernel 6.2 – 6.6.137
linux linux_kernel 6.7 – 6.12.85
linux linux_kernel 6.13 – 6.18.22
linux linux_kernel 6.19 – 6.19.12
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
Showing 30 of 207 entries

References & Advisories (127)

Showing 25 of 127 references

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

98.11%
Raw Score 0.981140
Percentile 99.9%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links