CVE-2026-31431
Linux Kernel
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
What it is
Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.
What to do
"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
- lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/
- xint.io/blog/copy-fail-linux-distributions#the-fix-6
- git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/
- nvd.nist.gov/vuln/detail/CVE-2026-31431
Description and required action as published by CISA. Full record at NVD.
Other Linux entries on the list
- Kernel Linux Kernel Missing Initialization of a Variable Vulnerability CVE-2026-46300 · Oct 28, 2026
- Kernel Linux Kernel Out-of-Bounds Write Vulnerability CVE-2026-53266 · Sep 18, 2026
- Kernel Linux Kernel Race Condition Vulnerability CVE-2025-39964 · Sep 18, 2026
- Kernel Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability CVE-2025-39682 · Sep 18, 2026
- Kernel Linux Kernel Unspecified Vulnerability CVE-2026-53362 · Aug 27, 2026
- Kernel Linux Kernel Out-of-Bounds Write Vulnerability CVE-2022-0995 · Aug 26, 2026