HIGHVulnerability
Verified
Global

CISA KEV: Linux Kernel — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.

Analysis

Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation. Added to CISA Known Exploited Vulnerabilities catalog on 2026-05-01. Remediation due: 2026-05-15.

Indicators of Compromise (1)

CVE (1)
CVE-2026-31431
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on May 1, 2026. Verified by: CISA.

Related Threats

LOWVulnerability

Dirty Frag: Using the Page Caches as an Attack Surface

Dirty Frag is a Linux local privilege escalation (LPE) chain published on May 7, 2026. It combines two previously unknown kernel vulnerabilities can allow an unprivileged local user to escalate to root on many major Linux distributions. As of May 8, 2026, CVE-2026-43284 had been patched in mainline Linux, while public reporting indicated that CVE-2026-43500 […]

CVE-2026-43284CVE-2026-43500
Qualys Blog
LOWVulnerability

cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

cPanel has released updates to address three vulnerabilities in cPanel and Web Host Manager (WHM) that could be exploited to achieve privilege escalation, code execution, and denial-of-service. The list of vulnerabilities is as follows - CVE-2026-29201 (CVSS score: 4.3) - An insufficient input validation of the feature file name in the "feature::LOADFEATUREFILE" adminbin call that could result

CVE-2026-29201
The Hacker News
MEDIUMVulnerability

ISMG Editors: The Battle Over Access to Frontier AI Models

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ismg-editors-battle-over-access-to-frontier-ai-models-image_small-10-a-31644.jpg" align=right hspace=4><b>Also: Washington's AI Policy Divide, FDA's Push for AI-Driven Clinical Trials</b><br>In this week's panel, four ISMG editors discussed the battle over who gets to access powerful AI cybersecurity models, policy issues unfoldin

Bank Info Security