Red Hat Security Advisory: kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1
Affects Red HatSource GCVE Database
Exploited in the wild · KEV due 15 May 2026 · public exploit available (Metasploit) : apply the vendor's fix or mitigations to Red Hat now.
Data as of 5 Nov 2026, 22:49 UTC
Actively exploited
High severity · No CVSS score from NVD or the CNA
- KEV deadline
- US federal agencies must patch by this date; a sensible deadline for everyone else. Other KEV due dates
Exploitation evidence
t = 0 is the CVE’s publication on cve.org
Disclosed: evidence found.
CVE published 11 May 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: evidence found.
Exploited in the wildExploited: evidence found.
Listed in CISA KEV 10 days before disclosure
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
Timeline
Added to CISA KEV (opens in a new tab)
exploitation confirmed
, 10 days before disclosure
CVE published
on cve.org
, t = 0
KEV remediation due
US federal deadline
, 4 days after disclosure
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), CISA KEV (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.
What to do
"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/ (opens in a new tab)
- xint.io/blog/copy-fail-linux-distributions (opens in a new tab)
- git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/ (opens in a new tab)
- nvd.nist.gov/vuln/detail/CVE-2026-31431 (opens in a new tab)
Description
This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-570.17.1.el9_6. Security Fix(es): * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.