CVE-2026-31431—Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

漏洞名称

Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

描述

Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

其他说明

• https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/
• https://xint.io/blog/copy-fail-linux-distributions#the-fix-6
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/
• https://nvd.nist.gov/vuln/detail/CVE-2026-31431

相关新闻文章

• New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits AndroidJuly 3, 2026
• New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned PacketsJune 26, 2026
• Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight ModelsJune 9, 2026
• DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE VulnerabilityMay 19, 2026
• Dirty Frag: Unpatched Linux vulnerability delivers root accessMay 8, 2026

相关 CWE

• CWE-669