VulnerabilitySANS NewsBites
Patch and Mitigate Now: Linux Kernel Vulnerable to Privilege Escalation
NEOSEC enrichment — no mirror of the original source
Theori has disclosed and published a proof-of-concept exploit for a high-severity flaw in the Linux kernel affecting most distributions of Linux released since 2017. CVE-2026-31431, CVSS score 7.8, allows an unprivileged local attacker to e
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
- CVE-2026-31431Linux Kernel — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
- CVE-2026-31431IBM QRadar SIEM: Mehrere Schwachstellen
- CVE-2026-31431Linux Kernel: Mehrere Schwachstellen
- CVE-2026-31431Debian linux: security update
- CVE-2026-31431Debian linux: security update
- CVE-2026-31431crypto: algif_aead - Revert to operating out-of-place
- CVE-2026-31431Linux kernel (IoT) vulnerabilities
- CVE-2026-31431Linux kernel (Low Latency) vulnerabilities
- CVE-2026-31431Linux kernel (Azure) vulnerabilities
- CVE-2026-31431Linux kernel (Azure) vulnerabilities
- CVE-2026-31431Linux kernel (Intel IoTG Real-time) vulnerabilities
- CVE-2026-31431Linux kernel (NVIDIA Tegra IGX) vulnerabilities
- CVE-2026-31431Linux kernel (NVIDIA) vulnerabilities
- CVE-2026-31431Linux kernel (GCP) vulnerabilities
- CVE-2026-31431Linux kernel (Azure)vulnerabilities
- CVE-2026-31431Linux kernel (Azure) vulnerabilities
- CVE-2026-31431Linux kernel (Oracle) vulnerabilities
- CVE-2026-31431Linux kernel (NVIDIA) vulnerabilities
- CVE-2026-31431Linux kernel vulnerabilities
- CVE-2026-31431Linux kernel vulnerabilities
- CVE-2026-31431Linux kernel vulnerabilities
- CVE-2026-31431Linux kernel vulnerabilities
- CVE-2026-31431Linux kernel vulnerabilities
- CVE-2026-31431Linux kernel vulnerabilities
- CVE-2026-31431In the Linux kernel, the following vulnerability has been resolved:
- CVE-2026-31431Linux kernel (NVIDIA Tegra) vulnerabilities
- CVE-2026-31431Linux kernel (Low Latency) vulnerabilities
- CVE-2026-31431Kernel Live Patch Security Notice
- CVE-2026-31431Linux kernel (Azure FIPS) vulnerabilities
- CVE-2026-31431Linux kernel vulnerabilities
- CVE-2026-31431Linux kernel (Raspberry Pi) vulnerabilities
Affected vendors and products
More on Mitigate
Other advisories
- HighCVE-2026-53354arm64: errata: Mitigate TLBI errata on various Arm CPUs
- Not ratedosv:CVE-2026-53354arm64: errata: Mitigate TLBI errata on various Arm CPUs
- HighCVE-2026-33376When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate …
- HighCVE-2026-43048HID: core: Mitigate potential OOB by removing bogus memset()
- Not ratedosv:CVE-2026-43048HID: core: Mitigate potential OOB by removing bogus memset()
- Not ratedosv:ECHO-776a-c85c-3da5This vulnerability is only applicable in scenarios in which a terminal emulator with improper handling of escape codes; Terminal emulators in Echo's images employ proper escaping and sanitization to mitigate such risks. https://ubuntu.com/security/CVE-2018-1000021#notes https://security-tracker.debian.org/tracker/CVE-2018-1000021
- Not ratedosv:ECHO-3e1f-5d01-40deThe issue is mitigated by Debian's default policies for imagemagic. The two required policies detailed by the github issue are present in Debian's policy.xml. https://github.com/ImageMagick/ImageMagick/issues/1255
- HighCVE-2025-37963arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
Other news entries
- OpenAI’s August fix for theft of reasoning traces was quickly bypassedNewsCSO Online
- ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacksNewsBleepingComputer
- New npm malware finds a way around install script defensesNewsCSO Online
- Cisco searched for IOS XR bugs and found so many it rolled them into an update releaseNewsThe Register — Security
- Microsoft Patches 22 Vulnerabilities, Including Critical RCE Flaw in Entra IDVulnerabilitySANS NewsBites
- Global Threat Campaign Hits Critical VMware vCenter FlawNewsDark Reading
- DDoS attacks over 1 Tbps surged fivefold in the second quarterNewsBleepingComputer
- Security leaders’ rogue AI confidence could actually be disastrousNewsCSO Online
Source: https://copy.fail/
ID