CVE-2026-31695 Linux kernel used for Fedora LPE

The author details the discovery, analysis, and exploitation of CVE-2026-31695, a five-year-old logical bug in Linux network device management leading to a use-after-free vulnerability in the kernel. The article explains how an unprivileged user can achieve local privilege escalation on Fedora 44 Server by bypassing security hardening mechanisms, spoofing a struct device, and stabilizing the elusive race condition through multi-threaded synchronization. Open article →