CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a recently disclosed security flaw impacting various Linux distributions to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.

The vulnerability, tracked as CVE-2026-31431 (CVSS score: 7.8), is a case of local privilege escalation (LPE) flaw that could allow an attacker with local access to gain root privileges on an affected system.

Federal Civilian Executive Branch (FCEB) agencies are required to apply the necessary mitigations by the deadline set by CISA. Organisations across the public and private sector are encouraged to review the advisory, identify exposed systems, and apply distribution-provided patches without delay.

Editorial note: This bulletin summarises a cybersecurity advisory of general interest to corporate clients managing IT compliance and incident-response obligations.