CISA Adds Actively Exploited Linux Kernel LPE CVE-2026-31431 to KEV

A local privilege escalation flaw in the Linux kernel's AEAD crypto interface has been added to CISA's KEV catalog after active exploitation. Federal patch deadline is May 15, 2026.