CVE-2026-31431: Linux Kernel Incorrect Resource Transfer Between Spheres

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability. Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.

• CISA KEV-listed (remediation due 2026-05-15)
• EPSS 94.5% (99.8% percentile)
• CVSS 7.8 high

Detection rules

• Linux AF_ALG Socket Creation - Kernel Crypto API Exploit Indicator high
• Authencesn Crypto Module Load via Modprobe - Copy-Fail Indicator high

Related briefings

• Attackers weaponize most public exploits within 48 hours 2026-08-03
• CISA flags critical bugs in Rockwell and ABB industrial gear 2026-07-15
• Fortinet Checks Whether Its Security Tools Are Exposed to a Linux Kernel Flaw 2026-06-06
• New Linux Bug Lets Any Local User Become Root 2026-06-06

Browse the CVE database

Read the full analysis on IntelFusions