Actively exploited vulnerability

CVE-2026-31431: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.

CISA KEV source 1 May 2026 added 15 May 2026 remediation due

Linux · Kernel

Known ransomware use: Unknown

"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

The Hacker News3 May 2026

CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a recently disclosed security flaw impacting various Linux distributions to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild

CVE-2026-31431: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Affected product

Required action

Related Yasna coverage

CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV