ansible-role-cve-2026-31431

ansible-role-cve-2026-31431 Ansible role to apply and later remove the modprobe.d mitigation for CVE-2026-31431 "Copy Fail" in the Linux kernel's AFALG / algifaead subsystem. Tested on Debian. Pull requests for other distributions, edge cases, or improvements are very welcome. What it does The ro...

Weekly-Breach-Investigation--006

Copy Fail Vulnerability CVE-2026-31431 Summary High-severity local privilege escalation flaw in the Linux kernel, allowing unprivileged users to gain root access by corrupting the in-memory page cache. Impacts Linux distributions since 2017 and poses serious risks to cloud and containerized...

copy-fail-CVE-2026-31431-C

copy-fail-CVE-2026-31431-C Verified on ubuntu 18.04,ubuntu 20.04,ubuntu 22.04,kali 2024,kali 2025,kali 2026 gcc -o exploit exploit.c -lz && chmod +x exploit && ./exploit Verified on ubuntu 25.04 arm64 gcc -o exploit exploitaarch64.c -lz && chmod +x exploit && ./exploit...

fix-cve-2026-3143

fix-cve-2026-3143 Diagnostics and remediation for CVE-2026-31431 copy fail Installation Copy the installation script to the clipboard and run it in the command line sudo apt install git && cd && git clone https://github.com/ClimbMunchkin/fix-cve-2026-3143.git fix-cve-2026-3143 && chmod +x...

copy-fail-CVE-2026-31431

CVE-2026-31431 Copy Fail exploit Author: pyroceper Tested on: Ubuntu 25.10 x8664 $ make $ ./exploit Detected kernel: 6.17.0 Making backup of /etc/passwd to /tmp Backup saved as /tmp/passwd.bak Obtaining root shell... id uid=0pwn gid=0root groups=0root whoami pwn CREDITS & REFERENCES: Original...

CVE-2026-31431-exp

Adapted from https://github.com/theori-io/copy-fail-CVE-2026-31431. Added payload encryption and obfuscation, cache write-back to improve system stability, adaptive chunking, zero dependencies, multi-architecture support x86, arm, i386, etc., and other features. In theory, it can be exploited on...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 - Verification and Mitigation Script This repository documents a Bash script used to assess exposure to CVE-2026-31431 on Linux hosts, with a focus on Ubuntu, and to apply a simple mitigation by blocking the algifaead module. Language versions: English: README.md Portuguese:...

Copy-Fail-Exploit-CVE-2026-31431

Copy-Fail-Exploit-CVE-2026-31431 unning the Python Exploit 1. Execute directly python3 copyfailexp.py Compiling the C Version 1. Compile gcc copyfailexp.c -o copyfail 2. Make executable chmod +x copyfail 3. Run exploit ./copyfail su...

CVE-2026-31431

PoC Python for Copy Fail CVE-2026-31431 Python use nosplice variant...

copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Technical Writeup Tested Distro / Version Distro| Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1| 6.12.0-124.45.1.el101 SUSE 16| 6.12.0-160000.9-default...

CVE-2026-31431-old-python

CVE-2026-31431 fork from: https://github.com/theori-io/copy-fail-CVE-2026-31431/blob/main/copyfailexp.py Problem Python versions below 3.10 does not have os.splice implementation. Solution Ctypes python wrapper for splice that can work on old Python versions Tested on python 3.7.3...

copy-fail-cve-2026-31431

Copy Fail - CVE-2026-31431 This repository provides a Go port of the public Copy Fail PoC and a reproducible build pipeline for multi architecture Linux binaries. Copy Fail CVE-2026-31431 is a Linux kernel logic flaw in authencesn that enables a deterministic 4 byte write into page cache data...

copy-fail-cve-2026-31431

CVE Checker for Copy Fail CVE-2026-31431 Authors/Contributors : Patrick Doyle Author/Maintainer, Effie Renard Co-Author, Kimberly-Lee Banks Co-Author, Chris F. Support/Code Review AI Disclosure : Claude Code used for writing tests files, writing test data, and a code security review. All edits we...

check-copyfail-cve-2026-31431

check-copyfail check-copyfail.sh is a read-only Bash script that assesses host exposure to CVE-2026-31431 "Copy Fail". Author: Silent4Labs It inspects the local system for: kernel version and known upstream patch state affected distribution baselines algifaead module status active AFALG socket...

afalg-check

Itsumma AFALG Check Diagnostic utility for Linux that checks: availability of AFALG / algifaead and helps assess the risk of CVE-2026-31431 copy-fail; the presence of an attack surface for the Dirty Frag vulnerability class xfrm-ESP Page-Cache Write + RxRPC Page-Cache Write chain across the esp4,...

copy.fail-mitigation-MLM

Create a new configuration channel State Channel in Multi-Linux Manager using the code from the copy-fail.sls file. Assign the config channel to all your machines and run it, or execute Highstate. This is a temporary fix!...

mitigate-copy-fail.yml

This repository does not have a README...

Copy-Fail-CVE-2026-31431

Copy-Fail-CVE-2026-31431 A proof-of-concept exploit reproduction of the Linux kernel vulnerability CVE-2026-31431 , also known as Copy Fail. Credits to: Copy Fail Affected Systems Linux kernel versions 4.14 and newer Most major distributions released from 2017 until patch deployment Ubuntu, Debia...

cve-2026-31431

CVE-2026-31431 Copy Fail Detection and Mitigation Tool This project provides a set of Bash scripts for detecting and mitigating CVE-2026-31431 also known as "Copy Fail", a Linux kernel local privilege escalation vulnerability. Vulnerability Overview CVE ID : CVE-2026-31431 Vulnerability Type :...

cve-2026-31431

CVE-2026-31431 "Copy Fail" — Detection & Safe Kernel Patch Scripts Linux kernel local privilege escalation via algifaead AFALG CVSS 7.8 HIGH | Public disclosure: April 2026 ⚡ Quick Start 1. Detection Script safe, read-only Run as a normal user: curl -fsSL...