Skip to content
COOEY

EXPOSURES › CVE-2026-31431

CVE-2026-31431

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2026-05-01 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-31431 ↗
⌖ EXPLOITED IN THE WILD SHAME 45/100 exploited-in-wildunpatchedprivilege-escalation

Linux kernel vulnerability CVE-2026-31431 enables privilege escalation via incorrect resource transfer between spheres.

This unpatched kernel flaw allows privilege escalation, posing a critical risk to DIB systems relying on Linux for security controls. Organizations must patch immediately to prevent unauthorized access to sensitive data and maintain NIST 800-171 compliance.

Shame score — A known kernel vulnerability that poses significant risk but lacks the negligence or avoidability of a supply-chain breach or default credential failure.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
linux · vendorKernel · product
DESCRIPTION

Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.