CVE-2026-31431-CopyFail-static-ELF--POC

CVE-2026-31431: Copy Fail - ELF estático de 587 bytes No encontré este bug. El crédito es para Xint Code / Theori. Este repo es mi enfoque para hacer el exploit lo más pequeño posible: un ELF x8664 hecho a mano que hace el LPE completo en 587 bytes. Sin libc, sin enlazador, sin runtime. Solo NASM...

cve-2026-31431-mitigation

CVE-2026-31431 Copy Fail – 技术缓解工具集 1. 概述 本工具包为运行受影响内核（版本 4.14 至 6.12.84、6.13 至 6.18.21 等）的 Linux 系统提供自动化解决方案，用于 检测并缓解 CVE-2026-31431 漏洞（又名 Copy Fail ）。 该工具集包含： 一个 统一的 Bash 脚本 （mitigatecopyfail.sh），它能够： 运行 Phalanx-CCS （攻击面活跃性检测）和 Silent4Labs （风险评估）。 检测内核配置（CONFIGCRYPTOUSERAPIAEAD=m|y）。 应用相应的缓解措施：...

CVE-2026-31431

📌 CVE-2026-31431 – Escalada de Privilegios mediante el Uso Incorrecto de Sockets Criptográficos AEAD 🧠 Resumen CVE-2026-31431 es una vulnerabilidad de escalada de privilegios en Linux que abusa de la interfaz AFALG API criptográfica del kernel. Al elaborar una interacción maliciosa con sockets AE...

Unbreakable Enterprise kernel security update

5.15.0-320.202.8.2 - xfrm: esp: ipv4: fix up flags setting Greg Kroah-Hartman Orabug: 39344515 CVE-2026-43284 - xfrm: esp: avoid in-place decrypt on shared skb frags Kuan-Ting Chen Orabug: 39344515 CVE-2026-43284 5.15.0-320.202.8.1 - x86/CPU/AMD: Add a fix for AMD-SB-7052 Prathyushi Nangia Orabug...

SUSE-SU-2026:21521-1 Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues The following security issues were fixed: - CVE-2026-23204: net/sched: clsu32: use skbheaderpointercareful bsc1259126. - CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy...

ALSA-2026:13577 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nvme: avoid double free special payload CVE-2024-41073 kernel: net: qlogic/qede: fix potential out-of-bounds read in qedetpacont and qedetpaend CVE-2025-40252 kernel: crypto: asymmetricke...

CVE_2026_31431-Testing-the-Copy-Fail-exploit

CVE-2026-31431 Exploit Toolkit A comprehensive toolkit for de...

Unbreakable Enterprise kernel security update: Copy Fail

5.15.0-319.201.4.4 - crypto: algifaead - Fix minimum RX size check for decryption Herbert Xu Orabug: 39291961 - crypto: afalg - Fix page reassignment overflow in afalgpulltsgl Herbert Xu Orabug: 39291961 - crypto: authencesn - Fix src offset when decrypting in-place Herbert Xu Orabug: 39291961 -...

CVE-2024-50281 KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation When sealing or unsealing a key blob we currently do not wait for the AEAD cipher operation to finish and simply return after submitting the request. If there is...

CVE-2024-50281

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation When sealing or unsealing a key blob we currently do not wait for the AEAD cipher operation to finish and simply return after submitting the request. If there is...

CVE-2024-50281

CVE-2024-50281 affects the Linux kernel’s key management component, specifically the trusted: dcp path. The vulnerability stems from sealing/unsealing a key blob where the AEAD cipher operation is submitted but not waited for, allowing a race that can lead to a NULL pointer dereference in the DCP...