SARA / Free Tools / CVE / CVE-2026-31431

CVE-2026-31431 — In the Linux kernel, the following vulnerability has been resolved:

In the Linux kernel, the following vulnerability has been resolved:

CVSS

7.8 HIGH

EPSS

2.57% (top 14.30%)

CWE

—

Published

2026-04-22T09:16:21.270

Last modified

2026-05-18T19:39:38.417

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA KEV — Actively Exploited

Added to KEV

2026-05-01

BOD 22-01 due

—

Ransomware use

Unknown

View KEV detail

01What is this vulnerability?

In the Linux kernel, the following vulnerability has been resolved:

No structured affected-product list available — see references below for vendor advisories.

Yes — actively exploited. Added to the CISA KEV catalog on 2026-05-01. Ransomware use: Unknown.

Patch to a fixed version listed in the vendor advisory (see references below).
Mitigate with WAF rules, network egress filters, or feature flags where the patch is not yet available.
Hunt historical logs for exploitation indicators — see Detection signatures below.

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection in your stack of choice:

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

git.kernel.org — https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c
git.kernel.org — https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc
git.kernel.org — https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667
git.kernel.org — https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82
git.kernel.org — https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b
git.kernel.org — https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5
git.kernel.org — https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237
git.kernel.org — https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8
www.openwall.com — http://www.openwall.com/lists/oss-security/2026/04/29/23
www.openwall.com — http://www.openwall.com/lists/oss-security/2026/04/29/25

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.