New Linux Kernel Vulnerability and Other Security Updates

🎬 A newly disclosed Linux kernel vulnerability, CVE-2026-31431 (CVSS 7.8), affects all kernels built between 2017 and April 2026, enabling local privilege escalation to root via a 732-byte Python script. The flaw, discovered by Xent Code and originally reported by researcher Tayyang Lee, exploits a logic error in the kernel’s AEAD crypto implementation, allowing attackers to overwrite four bytes in the page cache of any readable file—including setuid binaries—through improper scatter-gather list handling. Patches were committed to the mainline kernel on April 1, 2026, with high-priority targets being multi-tenant Linux hosts. Separately, GitHub addressed CVE-2026-2854 (CVSS 8.8), an AI-discovered remote code execution flaw in its Git infrastructure, caused by unsanitized input in git push option fields, which was patched the same day it was reported (March 4, 2026). The video also highlights a supply-chain attack on the PyTorch Lightning package, where compromised maintainer accounts distributed credential-stealing malware, and notes Google’s adjusted bug bounty payouts prioritizing vulnerabilities resistant to AI detection.