cve-2026-31431-check

cve-2026-31431-check cve-2026-31431-check is a small Bash triage script for checking local Linux exposure and mitigation indicators for CVE-2026-31431, also known as "Copy Fail." The script targets Debian, Ubuntu, and Debian-family derivatives including Linux Mint, Pop!OS, and similar...

copyfail-arm64

Copy Fail ARM64 Research CVE-2026-31431 Analysis and ARM64 reproduction of the Copy Fail Linux kernel privilege escalation vulnerability CVE-2026-31431, originally disclosed by Xint. Blog post: Copy Fail on ARM64: Understanding and Porting CVE-2026-31431 What's Included File| Description ---|---...

copyfail-CVE-2026-31431

copyfail-CVE-2026-31431 Extended version of the CVE-2026-31431 "Copy Fail" Linux Local Privilege Escalation PoC. Credits Original discovery & exploit: Theori / Xint — copy.fail Original repo: theori-io/copy-fail-CVE-2026-31431 Extended by: Trex1e What's different in this version Automatically...

Copy-Fail---CVE-2026-31431

Copy-Fail---CVE-2026-31431 CVE-2026-31431 "Copy Fail" - Analysis and defensive research for the Linux kernel AFALG privilege escalation vulnerability affecting all major distributions since 2017. 100% reliable LPE via authencesn logic flaw Files include a binary , that automates the whole process...

ubuntu-cve-2026-31431-mitigation

Complete Guide to Updating the Kernel and kmod in Ubuntu to Fix Security Vulnerabilities CVE CVE-2026-31431 This vulnerability, also known as Copy Fail, is a logic bug in the Linux kernel that occurs in the AFALG / algifaead path. According to the discloser, an unprivileged local user can cause t...

CVE-2026-31431-Copy-Fail-Container-Escape

CVE-2026-31431-Copy-Fail-Container-Escape Demo https://github.com/user-attachments/assets/2cb0cb67-789a-4461-a0b8-1fe878d9426e Prerequisite Container vulnerable to CVE-2026-31431 Container healthcheck configured and healthcheck CMD known Obtained root access inside the container if not, you can...

cve-2026-31431-checker

CVE-2026-31431 Copy Fail Detection Tool A comprehensive detection and analysis tool for CVE-2026-31431 "Copy Fail" vulnerability in Linux kernels. ⚠️ IMPORTANT DISCLAIMER This tool is for DETECTION ONLY. It does not exploit or modify any system files. Only reads system information and configuratio...

CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script

CVE-2026-31431 — Copy Fail — Vulnerability Detection Script Detection only. A working PoC already exists at copy.fail/exploit. This script is for sysadmins and security teams determining where they are vulnerable — or still vulnerable after patching. What's this about? On April 29th 2026, a...

cve-2026-31431-mitigation

CVE-2026-31431 Copy Fail – Technical Mitigation Tooling 1. Overview This package provides an automated solution to detect and mitigate the CVE-2026-31431 vulnerability aka Copy Fail on Linux systems running affected kernels versions 4.14 through 6.12.84, 6.13 through 6.18.21, etc.. The tooling...

copy-fail-rs

This repository does not have a README...

copy-fail-CVE-2026-31431-C

copy-fail-CVE-2026-31431-C Verified on ubuntu 24,ubuntu 25,kali 2026. gcc -o exploit exploit.c -lz && chmod +x exploit && ./exploit Static compilation sudo apt install zlib1g-dev gcc -static -o exploit exploit.c -lz or aarch64-linux-gnu-gcc -o exploit exploit.c -lz -static...

CVE-2026-31431-live-code-corruption

CVE-2026-31431 — Live Code Corruption via Page Cache A novel exploitation technique for CVE-2026-31431 "Copy Fail" that corrupts executable code of running processes through the Linux kernel's page cache, achieving root privilege escalation. What's Different All published exploits for this CVE...

play-go-copy-fail-cve-2026-31431

Play Go Copy Fail CVE-2026-31431 Purpose Learn linux syscall low-level Port python and c into golang Craft own payload then exploit as newbie Auto upgrade pty manually Inspiration tgies/copy-fail-c painoob/Copy-Fail-Exploit-CVE-2026-31431 Resource Linux Source Crypto...

copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Technical Writeup Tested Distro / Version Distro| Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1| 6.12.0-124.45.1.el101 SUSE 16| 6.12.0-160000.9-default...

CVE-2026-31431-Copy-Fail

CVE-2026-31431-Copy-Fail xpl0ited by infrar3d This repository contains a proof‑of‑concept exploit for CVE-2026-31431 Copy Fail. CVE-2026-31431, known as "Copy Fail", is a high-severity Local Privilege Escalation LPE flaw in the Linux kernel that has been present for nearly a decade. It allows an...

copyfail-c

copyfail-c A minimal C reproduction for researching Copy Fail CVE-2026-31431. This repository contains a compact C implementation built around the Linux kernel AFALG interface for vulnerability research, behavior analysis, and controlled reproduction. Repository layout . ├── src/ C source ├── dis...

copy-fail-CVE-2026-31431-php

CVE-2026-31431 Copy Fail PHP PoC www-data@jumpbox:/home$ id uid=33www-data gid=33www-data groups=33www-data www-data@jumpbox:/home$ uname -a Linux testbox 5.15.0-136-generic 147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x8664 x8664 x8664 GNU/Linux www-data@jumpbox:/home$ php CVE-2026-31431.php id...

Copy-Fail-CVE-2026-31431-Statically-PoC

Copy-Fail CVE-2026-31431 Static Go PoC This repository contains a Go port of the public Python proof of concept from theori-io/copy-fail-CVE-2026-31431. The program is Linux-only. It uses the Linux AFALG interface, AEAD control messages, and splice2 to preserve the behavior of the original PoC...

CVE-2026-31431

Copy Fail - CVE-2026-31431 Technical Writeup Tested Distro / Version Distro| Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1| 6.12.0-124.45.1.el101 SUSE 16| 6.12.0-160000.9-default...

DIRTYFAIL

DIRTYFAIL A unified detector and PoC harness for the Copy Fail and Dirty Frag Linux page-cache write vulnerability families. ██████╗ ██╗██████╗ ████████╗██╗ ██╗███████╗ █████╗ ██╗██╗ ██╔══██╗██║██╔══██╗╚══██╔══╝╚██╗ ██╔╝██╔════╝██╔══██╗██║██║ ██║ ██║██║██████╔╝ ██║ ╚████╔╝ █████╗ ███████║██║██║ █...