Firetruck

CVE-2026-31431

KEV
Updated Oct 15, 2026 · PUBLISHED
View KEV entry →

Description

Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
kernelRed Hat / Red Hat Enterprise Linux 7any versionunknown
kernelRed Hat / Red Hat Enterprise Linux 6any versionunknown
kernelRed Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On>= 0:4.18.0-305.190.1.el8_4, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support>= 0:4.18.0-305.190.1.el8_4, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service>= 0:4.18.0-372.191.1.el8_6, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions>= 0:4.18.0-372.191.1.el8_6, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support>= 0:4.18.0-372.191.1.el8_6, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions>= 0:4.18.0-477.139.1.el8_8, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service>= 0:4.18.0-477.139.1.el8_8, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 8>= 0:4.18.0-553.123.1.el8_10, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions>= 0:5.14.0-284.169.1.el9_2, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 9.4 Extended Update Support>= 0:5.14.0-427.124.1.el9_4, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 9.6 Extended Update Support>= 0:5.14.0-570.112.1.el9_6, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 9>= 0:5.14.0-611.54.1.el9_7, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 9>= 0:5.14.0-687.5.3.el9_8, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions>= 0:5.14.0-70.178.1.el9_0, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 10>= 0:6.12.0-124.55.1.el10_1, < *unaffected
kernelRed Hat / NVIDIA for RHEL 10>= 0:6.12.0-211.6.el10nv, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 10>= 0:6.12.0-211.7.3.el10_2, < *unaffected
kernelRed Hat / NVIDIA for RHEL 10>= 0:6.12.0-231.12.el10nv, < *unaffected
kernelRed Hat / Red Hat Enterprise Linux 10.0 Extended Update Support>= 0:6.12.0-55.71.1.el10_0, < *unaffected
kernel-rtRed Hat / Red Hat Enterprise Linux 7any versionunknown
kernel-rtRed Hat / Red Hat Enterprise Linux 8>= 0:4.18.0-553.123.1.rt7.464.el8_10, < *unaffected
kernel-rtRed Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions>= 0:5.14.0-284.169.1.rt14.454.el9_2, < *unaffected
kernel-rtRed Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions>= 0:5.14.0-70.178.1.rt21.250.el9_0, < *unaffected
kpatch-patchRed Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportany versionunknown
kpatch-patchRed Hat / Red Hat Enterprise Linux 8any versionunknown
kpatch-patchRed Hat / Red Hat Enterprise Linux 9.4 Extended Update Supportany versionunknown
kpatch-patchRed Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsany versionunknown
kpatch-patchRed Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsany versionunknown
kpatch-patchRed Hat / Red Hat Enterprise Linux 9any versionunknown
kpatch-patchRed Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsany versionunknown
kpatch-patchRed Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsany versionunknown
LinuxLinux / Linux>= 0, < 4.14unaffected
LinuxLinux / Linux4.14affected
LinuxLinux / Linux>= 5.10.254, <= 5.10.*unaffected
LinuxLinux / Linux>= 5.15.204, <= 5.15.*unaffected
LinuxLinux / Linux>= 6.1.170, <= 6.1.*unaffected
LinuxLinux / Linux>= 6.12.85, <= 6.12.*unaffected
LinuxLinux / Linux>= 6.18.22, <= 6.18.*unaffected
LinuxLinux / Linux>= 6.19.12, <= 6.19.*unaffected
LinuxLinux / Linux>= 6.6.137, <= 6.6.*unaffected
LinuxLinux / Linux>= 7.0, <= *unaffected
LinuxLinux / Linux>= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < 893d22e0135fa394db81df88697fba6032747667affected
LinuxLinux / Linux>= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < 19d43105a97be0810edbda875f2cd03f30dc130caffected
LinuxLinux / Linux>= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < 961cfa271a918ad4ae452420e7c303149002875baffected
LinuxLinux / Linux>= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < 3115af9644c342b356f3f07a4dd1c8905cd9a6fcaffected
LinuxLinux / Linux>= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < 8b88d99341f139e23bdeb1027a2a3ae10d341d82affected
LinuxLinux / Linux>= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8affected
LinuxLinux / Linux>= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < ce42ee423e58dffa5ec03524054c9d8bfd4f6237affected
LinuxLinux / Linux>= 72548b093ee38a6d4f2a19e6ef1948ae05c181f7, < a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5affected
rhcosRed Hat / Red Hat OpenShift Container Platform 4.12>= 412.86.202605060316-0, < *unaffected
rhcosRed Hat / Red Hat OpenShift Container Platform 4.13>= 413.92.202605051442-0, < *unaffected
rhcosRed Hat / Red Hat OpenShift Container Platform 4.14>= 414.92.202605060243-0, < *unaffected
rhcosRed Hat / Red Hat OpenShift Container Platform 4.15>= 415.92.202605060220-0, < *unaffected
rhcosRed Hat / Red Hat OpenShift Container Platform 4.16>= 416.94.202605042300-0, < *unaffected
rhcosRed Hat / Red Hat OpenShift Container Platform 4.17>= 417.94.202605050021-0, < *unaffected
rhcosRed Hat / Red Hat OpenShift Container Platform 4.18>= 418.94.202605042017-0, < *unaffected
rhcosRed Hat / Red Hat OpenShift Container Platform 4.19>= 4.19.9.6.202605042214-0, < *unaffected
rhcosRed Hat / Red Hat OpenShift Container Platform 4.20>= 4.20.9.6.202605051409-0, < *unaffected
rhcosRed Hat / Red Hat OpenShift Container Platform 4.21>= 4.21.9.6.202605051105-0, < *unaffected
SIMATIC AX Runtime Core Linux Common DebianSiemens / SIMATIC AX Runtime Core Linux Common Debian>= 0, < *affected
SIMATIC AX Runtime Core Linux Common Debian arm64Siemens / SIMATIC AX Runtime Core Linux Common Debian arm64>= 0, < *affected
SIMATIC AX Runtime Core Linux Platform Container Common Debian DevelopmentSiemens / SIMATIC AX Runtime Core Linux Platform Container Common Debian Development>= 0, < *affected
SIMATIC AX Runtime Core Linux VMWare DevelopmentSiemens / SIMATIC AX Runtime Core Linux VMWare Development>= 0, < *affected
SIMATIC CN 4100Siemens / SIMATIC CN 4100>= 0, < V6.0affected
SIMATIC HMI MTP1000 Unified BasicSiemens / SIMATIC HMI MTP1000 Unified Basic>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1000 Unified Comfort PanelSiemens / SIMATIC HMI MTP1000 Unified Comfort Panel>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1000 Unified Comfort Panel hygienicSiemens / SIMATIC HMI MTP1000 Unified Comfort Panel hygienic>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral designSiemens / SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1000, Unified Comfort Panel neutralSiemens / SIMATIC HMI MTP1000, Unified Comfort Panel neutral>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom)Siemens / SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unitSiemens / SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top)Siemens / SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom)Siemens / SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensionSiemens / SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top)Siemens / SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1200 Unified BasicSiemens / SIMATIC HMI MTP1200 Unified Basic>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1200 Unified Comfort PanelSiemens / SIMATIC HMI MTP1200 Unified Comfort Panel>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1200 Unified Comfort Panel hygienicSiemens / SIMATIC HMI MTP1200 Unified Comfort Panel hygienic>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral designSiemens / SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1200 Unified Comfort Panel neutral designSiemens / SIMATIC HMI MTP1200 Unified Comfort Panel neutral design>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom)Siemens / SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unitSiemens / SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top)Siemens / SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom)Siemens / SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensionSiemens / SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top)Siemens / SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1500 Unified Comfort PanelSiemens / SIMATIC HMI MTP1500 Unified Comfort Panel>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1500 Unified Comfort Panel hygienicSiemens / SIMATIC HMI MTP1500 Unified Comfort Panel hygienic>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral designSiemens / SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1500 Unified Comfort Panel neutral designSiemens / SIMATIC HMI MTP1500 Unified Comfort Panel neutral design>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom)Siemens / SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unitSiemens / SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top)Siemens / SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom)Siemens / SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensionSiemens / SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top)Siemens / SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1900 Unified Comfort PanelSiemens / SIMATIC HMI MTP1900 Unified Comfort Panel>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1900 Unified Comfort Panel hygienicSiemens / SIMATIC HMI MTP1900 Unified Comfort Panel hygienic>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral designSiemens / SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP1900 Unified Comfort Panel neutral designSiemens / SIMATIC HMI MTP1900 Unified Comfort Panel neutral design>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom)Siemens / SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unitSiemens / SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top)Siemens / SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom)Siemens / SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensionSiemens / SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top)Siemens / SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top)>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP2200 Unified Comfort HygienicSiemens / SIMATIC HMI MTP2200 Unified Comfort Hygienic>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral designSiemens / SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP2200 Unified Comfort PanelSiemens / SIMATIC HMI MTP2200 Unified Comfort Panel>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP2200 Unified Comfort Panel neutral designSiemens / SIMATIC HMI MTP2200 Unified Comfort Panel neutral design>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP400 Unified BasicSiemens / SIMATIC HMI MTP400 Unified Basic>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP700 Unified BasicSiemens / SIMATIC HMI MTP700 Unified Basic>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP700 Unified Comfort PanelSiemens / SIMATIC HMI MTP700 Unified Comfort Panel>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral designSiemens / SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral designSiemens / SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design>= 0, < V21 Update 2 SR1affected
SIMATIC HMI MTP700, Unified Comfort Panel neutral designSiemens / SIMATIC HMI MTP700, Unified Comfort Panel neutral design>= 0, < V21 Update 2 SR1affected
SIMATIC IoT2050 AdvancedSiemens / SIMATIC IoT2050 Advanced>= 0, < *affected
SIMATIC IPC Industrial Edge Device OS (IED-OS)Siemens / SIMATIC IPC Industrial Edge Device OS (IED-OS)>= 0, < *affected
SIMATIC S7-1500 CPU 1518-4 PN/DP MFPSiemens / SIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.5, < *affected
SIMATIC S7-1500 CPU 1518-4 PN/DP MFPSiemens / SIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.5, < *affected
SIMATIC S7-1500 CPU 1518-4 PN/DP MFPSiemens / SIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.6, < V3.1.7affected
SIMATIC S7-1500 CPU 1518-4 PN/DP MFPSiemens / SIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.6, < V3.1.7affected
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPSiemens / SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.5, < *affected
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPSiemens / SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.5, < *affected
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPSiemens / SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.6, < V3.1.7affected
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPSiemens / SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.6, < V3.1.7affected
SIMATIC S7-1500 TM MFPSiemens / SIMATIC S7-1500 TM MFP>= 0, < *affected
SIMATIC S7-1500 TM MFP - GNU/Linux subsystemSiemens / SIMATIC S7-1500 TM MFP - GNU/Linux subsystem>= 0, < *affected
SIPLUS HMI MTP1000 Unified BasicSiemens / SIPLUS HMI MTP1000 Unified Basic>= 0, < V21 Update 2 SR1affected
SIPLUS HMI MTP1000 Unified ComfortSiemens / SIPLUS HMI MTP1000 Unified Comfort>= 0, < V21 Update 2 SR1affected
SIPLUS HMI MTP1200 Unified BasicSiemens / SIPLUS HMI MTP1200 Unified Basic>= 0, < V21 Update 2 SR1affected
SIPLUS HMI MTP1200 Unified ComfortSiemens / SIPLUS HMI MTP1200 Unified Comfort>= 0, < V21 Update 2 SR1affected
SIPLUS HMI MTP400 Unified BasicSiemens / SIPLUS HMI MTP400 Unified Basic>= 0, < V21 Update 2 SR1affected
SIPLUS HMI MTP700 Unified BasicSiemens / SIPLUS HMI MTP700 Unified Basic>= 0, < V21 SP2 Update 1affected
SIPLUS HMI MTP700 Unified ComfortSiemens / SIPLUS HMI MTP700 Unified Comfort>= 0, < V21 Update 2 SR1affected
SIPLUS S7-1500 CPU 1518-4 PN/DP MFPSiemens / SIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.5, < *affected
SIPLUS S7-1500 CPU 1518-4 PN/DP MFPSiemens / SIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.6, < V3.1.7affected