mks-copy-fail-mitigation

Copy Fail 缓解 DaemonSet 用于在 MKS 集群的所有 worker 节点上修复 Copy Fail 系列漏洞的 DaemonSet。 目录 CVE-2026-31431 Copy Fail CVE-2026-43284、CVE-2026-43500、CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail 漏洞描述 CVE ID： CVE-2026-31431 CVE 链接： https://nvd.nist.gov/vuln/detail/CVE-2026-31431 攻击向量及 CVSS v.3.1 危险等级： 得分：7.8 HI...

cve-2020-0601_poc

Basic Info The source code of this tool is supposed to help with understanding of CVE-2020-0601 vulnerability discovered in Windows Crypto API, see CERT's overview. The tool itself can be used to produce a certificate for an arbitrary domain which will be signed by an evil certificate authority...

OCI-Ansible-Fix-CVE-2026-31431

CVE-2026-31431 Ansible 修复 本 playbook 修复 OCI 上 Linux 实例中的 CVE-2026-31431（也称为 Copy Fail）。 CVE-2026-31431 是 Linux 内核中由 AFALG 用户空间加密 API 使用的 algifaead 实现的一个本地权限提升问题。本 playbook 采用主要修复路径：安装更新后的厂商内核包并重启实例，使其运行已修复的内核。 参考： NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-31431 Copy Fail 披露：https://copy.fail...

cve-2026-31431-mitigation

CVE-2026-31431 Copy Fail – Herramienta de mitigación técnica 1. Descripción general Este paquete proporciona una solución automatizada para detectar y mitigar la vulnerabilidad CVE-2026-31431 conocida como Copy Fail en sistemas Linux con kernel afectado versiones 4.14 a 6.12.84, 6.13 a 6.18.21,...

CVE-2026-31431

CVE-2026-31431: "Copy Fail" - Escalada de Privilegios Local en el Kernel de Linux 📢 Aviso Legal Este repositorio es estrictamente para fines educativos y de investigación en ciberseguridad. El código del exploit se analiza para comprender la vulnerabilidad subyacente, facilitar su parcheo y...

c-copy-fail

CopyFail CVE-2026-31431 en la API de Criptografía del Kernel de Linux Recursos: sitio web principal llamadas al sistema para aarch64 pwntools para generar código shell cómo funcionan los datos auxiliares en sendmsg...

CVE-2026-31431

PoC de LPE CVE-2026-31431 Implementación en Rust Este proyecto es una Prueba de Concepto PoC implementada en Rust para una vulnerabilidad de escalada local de privilegios LPE simulando CVE-2026-31431. Demuestra cómo manipular la caché de páginas del kernel de Linux explotando la Crypto API.cite: ...

deny-af-alg-bpf

deny-af-alg-bpf Descripción Programa BPF LSM que bloquea la creación de sockets AFALG API criptográfica del kernel de Linux y registra todos los intentos mediante un ring buffer hacia el espacio de usuario. Qué hace Se adjunta al hook lsm/socketcreate Deniega cualquier llamada socketAFALG, ... co...

libkcapi security update

An update is available for libkcapi. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libkcapi allows user-space to access the Linux kernel crypto API. This libra...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: smb: client: fixed UAF in async decryption Performing async decryption large read results in a crash due to a slabuseafterfree issue in the crypto API. Reproducing the issue: mount.cifs -o ...,seal,esize=1 //srv/share /mnt dd...

ALSA-2026:67266 Moderate: libkcapi security update

libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level netlink interface handling. The library does not implement any cipher algorithms. All consumer request...

CVE-2026-80565 crypto: qce - fix error path in devm_qce_register_algs

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed registration. Use the loop index to unregister the previously registered...

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-8662-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8662-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

OESA-2026-3440 libkcapi security update

The Linux kernel exports a Netlink interface of type AFALG to allow user space to utilize the kernel crypto API. libkcapi uses this Netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level Netlink interface handling. The library does not implement...

CVE-2026-71225 affecting package libkcapi for versions less than 1.5.1-1

CVE-2026-71225 affecting package libkcapi for versions less than 1.5.1-1. An upgraded version of the package is available that resolves this issue...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100562)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100562 advisory. In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skbcowdata before in-place crypto llsecdoencryptunauth, llsecdoencryptauth,...

CVE-2026-74578

CVE-2026-74578 affects the Linux kernel crypto/algif_skcipher path. The AIO/async path in skcipher_recvmsg() could expose an attacker-controlled IV by overwriting ctx->iv via concurrent ALG_SET_IV writes, enabling IV/keystream reuse for CTR/stream modes and potentially plaintext recovery of co...

CVE-2026-71226

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers. Mitigation To mitigate this issue, applications should avoid initializing libkcapi handle...

CVE-2026-64439

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...

CVE-2026-64314

This vulnerability affects the Linux kernel 's chacha20poly1305 cryptographic module. The root cause is in chachapoly_create(), which assumes the poly1305 template argument is always present and passes the result of crypto_attr_alg_name() directly to strcmp(). When the argument is missing, an err...