Skip to main content
CVE-2026-31431VulnerabilityPublished Updated

Red Hat Security Advisory: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1

Affects Red HatSource GCVE Database

0
Compare

Exploited in the wild · KEV due 15 May 2026 · public exploit available (Metasploit) : apply the vendor's fix or mitigations to Red Hat now.

Data as of 5 Nov 2026, 22:49 UTC

Exploitation

Actively exploited

High severity · No CVSS score from NVD or the CNA

KEV deadline
 US federal agencies must patch by this date; a sensible deadline for everyone else. Other KEV due dates

Exploitation evidence

t = 0 is the CVE’s publication on cve.org

  1. Disclosed: evidence found.

    CVE published 12 May 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: evidence found.

    1 Metasploit module

  4. Exploited in the wild: evidence found.

    Listed in CISA KEV 11 days before disclosure

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

Timeline

  1. , 11 days before disclosure

  2. CVE published

    on cve.org

    , t = 0

  3. KEV remediation due

    US federal deadline

    , 3 days after disclosure

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), CISA KEV (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.

What to do

Description

This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-284.104.1.el9_2. Security Fix(es): * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Community reviews

Loading reviews…