ABB Ability Edgenius Vulnerability CVE-2026-31431: Linux Kernel Flaw Allows Privilege Escalation

ABB Ability Edgenius, an edge computing platform used in critical infrastructure sectors including manufacturing, energy, water and wastewater, and chemical processing, is affected by a high-severity Linux kernel vulnerability identified as CVE-2026-31431. The vulnerability, tracked as 'Copy Fail', stems from an incorrect 'in-place operation' in the Linux kernel's algif_aead cryptographic algorithm interface, where source and destination data mappings were different.

The issue impacts kernels used by most major Linux distributions released since 2017. A locally authenticated attacker could exploit this flaw to gain root-level privileges on affected systems. Once root access is obtained, the attacker can effectively achieve complete control of the system, including executing arbitrary code or causing denial of service.

The CVSS v3.1 base score for this vulnerability is 7.8, classified as High. The attack vector is local (AV:L), with low complexity (AC:L) and low privileges required (PR:L). While successful exploitation requires the attacker to already have local access to the system, the risk is notably increased in shared, containerized, or multi-tenant deployment environments.

ABB Ability Edgenius versions >=3.2.0.0 and <3.2.4.1, including the ABB Ability Edgenius Gateway - bE100, are listed as affected. ABB has resolved the issue in Edgenius version 3.2.4.1. The company recommends that customers apply the update at the earliest convenience.

Mitigation measures recommended by ABB include limiting access to SSH or cockpit interfaces and noting that, by default, no additional lower-privilege users are present on Edgenius installations. ABB PSIRT reported this vulnerability to CISA. No public exploitation has been reported at this time.