What is the severity of CVE-2026-31431?

CVE-2026-31431 has a CVSS v3 score of 7.8, which is classified as High severity.

Is there an exploit available for CVE-2026-31431?

Yes, there are known exploits available for CVE-2026-31431. Immediate patching is recommended.

Is there a patch available for CVE-2026-31431?

Yes, patches are available for CVE-2026-31431. Check the vendor advisories for update instructions.

CVE-2026-31431

Published: August 14, 2026

Last updated:1 day ago (October 2, 2026)

Exploit: YesZero-day: NoPatch: YesTrend: Viral

TL;DR

Updated October 2, 2026

CVE-2026-31431 is a high severity vulnerability with a CVSS score of 7.8. Exploits are available; patches have been released and should be applied urgently.

Key Points

1High severity (CVSS 7.8/10)
2EPSS: 3.00% - moderate likelihood of exploitation
3Public exploits are available
4Vendor patches are available
5Strobes Priority Score: 661/1000 (Medium)
6Affects products from 10 vendors

Test this CVE with Agentic AI

Deploy autonomous AI agents to validate this vulnerability in your environment.

Severity Scores

CVSS v37.8

CVSS v20.0

Priority Score661.0

EPSS Score3.0

High

Exploitation LikelihoodLow

3.00%EPSS

Lower probability of exploitation

Patch during regular maintenance

3.00%

EPSS

7.8

CVSS

Yes

Exploit

Yes

Patch

Medium Priority

exploit exists

EPSS predicts the probability of exploitation in the next 30 days based on real-world threat data, complementing CVSS severity scores with actual risk assessment.

Description

Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.

CVSS v3 Breakdown

Attack Vector:Local

Attack Complexity:Local

Privileges Required:Local

User Interaction:Network

Scope:Unchanged

Confidentiality:High

Integrity:High

Availability:High

Exploit References

Exploit-DB Cisa.gov Metasploit GitHub GitHub GitHub GitHub GitHub GitHub GitHub

Patch References

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory

Trend Analysis

Viral

Vulnerable Products

Vendor	Product
Suse	Basesystem Module
Redhat	Openshift Container Platform
Suse	Legacy Module
Suse	Development Tools Module
Suse	Linux Enterprise High Performance Computing
Canonical	Ubuntu Linux
Siemens	Simatic S7 1500 Tm Mfp Firmware
Suse	Realtime Module
Suse	Linux Enterprise Server
Arista	Netvisor Os

And 50 more...

Advisories

CISA: Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.

Cve Org GitHub Advisory

Msrc:

Netapp

NVD: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Oracle Red Hat

CVE-2026-31431

Threat Intelligence

Ready for Agentic Automated Testing?

CVE-2026-31431

Threat Intelligence