CISA Flags Linux Kernel Vulnerability as Threat Actors Launch Attacks

**Executive summary:** CVE-2026-31431 is a high-severity Linux kernel privilege-escalation vulnerability (CWE-699) confirmed to be actively exploited in the wild; CISA added it to its Known Exploited Vulnerabilities catalog and issued BOD 22-01 remediation deadlines, requiring immediate vendor kernel updates, isolation of unpatched systems, and enhanced monitoring for anomalous privilege changes.