Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

CVE-2026-31431 High CVSS 7.8 In-The-Wild Exploited
Beranda Advisories CVE-2026-31431

Ringkasan Kerentanan (Vulnerability Overview)

Rilis: 01 October 2026
Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.

Tindakan Mitigasi yang Wajib Diterapkan (Required Action)

Instruksi Keamanan untuk Pengelola TI / OPD
"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Seluruh pengelola server dan aplikasi di lingkungan OPD Kabupaten Ciamis diimbau untuk segera mengaudit perangkat terdampak dan mengaplikasikan patch sebelum batas waktu mitigasi.

Produk & Versi Terdampak

Produk Versi Basis Batas Terdampak Status Keamanan
Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 893d22e0135fa394db81df88697fba6032747667 AFFECTED
Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 19d43105a97be0810edbda875f2cd03f30dc130c AFFECTED
Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 961cfa271a918ad4ae452420e7c303149002875b AFFECTED
Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 3115af9644c342b356f3f07a4dd1c8905cd9a6fc AFFECTED
Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 8b88d99341f139e23bdeb1027a2a3ae10d341d82 AFFECTED
Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8 AFFECTED
Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 ce42ee423e58dffa5ec03524054c9d8bfd4f6237 AFFECTED
Linux 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5 AFFECTED
Linux 4.14 — AFFECTED
Linux 0 4.14 UNAFFECTED

Threat Intelligence Matrix

CVE Identifier
CVE-2026-31431
Vendor / Project Linux
Produk Terdampak Kernel
Skor CVSS
7.8 / 10.0
Status Eksploitasi AKTIF (In-The-Wild)
Kampanye Ransomware Tidak Diketahui
Automatable (Wormable) Unknown
Dampak Teknis Total
Sumber Intelijen CISA KEV

Butuh Pendampingan Mitigasi?

Tim Ciamiskab-CSIRT siap mendampingi verifikasi kerentanan dan langkah pengamanan aset digital OPD Anda.

Lapor ke CSIRT WhatsApp Hotline CSIRT
CSIRT Assistant
Halo 👋 Ada yang bisa saya bantu? Jika perlu, chat ini bisa diteruskan ke admin.
Scroll