ABB Ability Edgenius
CISA's ABB advisory covers CVE-2026-31431, a public Linux kernel flaw letting local users or compromised containers gain root on Ability Edgenius gateways.
ABB confirmed that CVE-2026-31431 (Copy Fail), a Linux kernel flaw in the algif_aead cryptographic interface (CWE-669), affects Ability Edgenius versions 3.2.0.0 to below 3.2.4.1 on bE100 gateways. A locally authenticated user or compromised container workload can gain root privileges, enabling arbitrary code execution or denial of service on the node. CVSS v3.1 score is 7.8, and the flaw impacts kernels shipped in most major Linux distributions since 2017. A fix is available and ABB reported no exploitation of Edgenius when the advisory was issued.
- CVE-2026-31431 is a Linux kernel algif_aead flaw enabling local root privilege escalation
- Affects Ability Edgenius 3.2.0.0 to below 3.2.4.1 on bE100 gateways
- Root access enables arbitrary code execution or node unavailability
- Underlying kernel flaw impacts most major distributions released since 2017
- Fix available; no Edgenius exploitation reported at advisory issuance
- CVEs
- CVE-2026-31431
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-31431 | Local Privilege Escalation (Copy Fail) in Linux Kernel algif_aead Interface | 7.8 | 98% | KEVPoC ×13 | KEV |
From the original article
5 min read at cisa.govView CSAF Summary ABB is aware of public reports of a vulnerability CVE‑2026‑31431 (Copy Fail) in the product versions listed as affected in the advisory. An update is available that resolves a publicly reported vulnerability. CVE‑2026‑31431 (Copy Fail) is a Linux kernel vulnerability that may allow a locally authenticated user or compromised container workload to gain elevated (root) privileges on affected systems.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.