CVE-2026-31431-Verificador-Exploit

CVE-2026-31431 - Linux Kernel Privilege Escalation Exploit Description Functional exploit for the CVE-2026-31431 vulnerability that allows local privilege escalation on Linux systems by exploiting a flaw in the kernel's AFALG cryptographic subsystem combined with the splice system call. Features...

CVE-2026-31431-cleaned

copyFail.py — CVE Exploit Analysis Report Summary copyFail.py is a proof-of-concept PoC exploit that demonstrates a local privilege escalation vulnerability in the Linux kernel. By abusing the splice system call in combination with crafted socket options, the exploit gains the ability to corrupt...

CVE-2021-1883

This repository does not have a README...

CVE-2021-1965

uses libwifi just for fun...

exploit-CVE-2025-39946

README This is an exploit for CVE-2025-39946. It will work on the lts-6.12.48 kCTF instance but not 100% reliable. I wrote a blog post analysing this vulnerability in detail. Check it out here! Adapting for other kernel versions The only modification the exploit should need to work for other kern...

lsm_bpf_check_argc0

Check ARGC0 LSM BPF Simple LSM BPF program to prevent program executions with argc == 0, e.g. pwnkit CVE-2021-4034. It does nothing more than a simple check that all exec system calls are called with argc = 1. The check is based on Ariadne Conill's patch. How to build On Ubuntu $ sudo apt-get...

CVE-2026-31431

CVE-2026-31431 Copy Fail Checker Checks whether a Linux host is vulnerable to CVE-2026-31431 and applies mitigation. Files checkcve202631431.yml - Ansible playbook to verify and patch revertcve202631431.yml - Ansible playbook to undo mitigation runcheck.sh - Script to run verification locally or...

fuck_cve_2026_31431

fuckcve202631431 make KERNELVER=uname -r : for LKM sudo insmod fuck-cve-2026-31431.ko regfakeimpl=1 : for builtin sudo insmod fuck-cve-2026-31431.ko...

harden-docker-seccomp

harden-docker-seccomp Idempotent script to block AFALG socket creation for all Docker containers on a host as mitigation for CVE-2026-31431 "Copy Fail". Background CVE-2026-31431 is a local privilege escalation in the Linux kernel's authencesn cryptographic template, present in kernels built...

CopyFile_CVE-2026-31431

CopyFileCVE-2026-31431 Copy Fail CVE-2026-31431 – Local Privilege Escalation Exploit A logic bug in the Linux kernel’s authencesn AEAD template allows an unprivileged user to write 4 controlled bytes into the page cache of any readable file. The provided Python script corrupts /usr/bin/su in memo...

Linux_LPE_io_uring_CVE-2021-41073

LinuxLPEiouringCVE-2021-41073 LPE exploit for CVE-2021-41073 iouring type confusion vulnerability. Checkout the writeup Put an iouring on it: Exploiting the Linux Kernel. author: @chompie1337 For educational/research purposes only. Not for use on testing or security evaulations. To build requires...

CVE-2026-31429-POC

CVE-2026-31429 — Linux Kernel: Cross-Cache Free of KFENCE-Allocated SKB Head via bpfprogtestrunskb Severity: Medium CWE-763: Release of Invalid Pointer or Reference Published: 2026-04-20 Affected subsystem: net/core/skbuff.c — skbkfreehead Researcher: Antonius / w1sdom — Blue Dragon Security...

CVE-2026-31431-C

Copy-Fail Exploit CVE-2026-31431 Local privilege escalation exploit targeting a Linux kernel copy-on-write vulnerability via AFALG sockets and splice operations. Overview This exploit abuses a kernel-level memory corruption condition in the Linux crypto subsystem AFALG combined with zero-copy...

cve-2026-31431-mitigation

CVE-2026-31431 Mitigation Script This repository provides a temporary mitigation and revert script for CVE-2026-31431, a Linux kernel local privilege escalation vulnerability. Disclaimer This is a temporary workaround, not a permanent fix. Use at your own risk. Always test in a non-production...

linux-copy-fail-CVE-2026-31431

Linux Copy-Fail Analysis CVE-2026-31431 🛡️ This repository contains an in-depth analysis, Proof-of-Concept PoC, and laboratory test results for the CVE-2026-31431 vulnerability, popularly known as "Copy-Fail". Copy-Fail exploits a logic flaw in the Linux Kernel’s Crypto API AFALG combined with the...

CVE-2026-31431

Copy Fail CVE-2026-31431 - Comprehensive Writeup 1. Vulnerability Overview Vulnerability Name: Copy Fail CVE Identifier: CVE-2026-31431 Discovered By / Authors: Xint Code Research Team building upon initial foundational research by Theori researcher Taeyang Lee. "Copy Fail" is a critical logic...

CVE-2026-31431-Patch

CVE-2026-31431 Copy Fail Mitigation & Patch Script Image Before Patch and Vulnerable Image After Patch With Script This repository contains a specialized bash script designed to mitigate and patch CVE-2026-31431 , also known as "Copy Fail". This vulnerability is a critical Local Privilege...

copy-fail-CVE-2026-31431-universal

CVE-2026-31431 - AFALG AEAD Splice UAF PoC Multi-language implementation and compatibility with older versions of Python. C exploit.c gcc -o exploit exploit.c -O2 gcc -o exploit exploit.c -static -O2 ./exploit Tested on Ubuntu 20.04: Python exploit-python3-8-10.py Compatible with Python 3.8.10 an...

CVE-2026-31431-rs

CVE-2026-31431 PoC copyfail Structure src/ ├── main.rs Exploit: AFALG + splice to overwrite /bin/su └── bin/ └── payload.rs Payload Self-contained nostd binaries with zero runtime dependencies: poc-rs: 4.1 KB payload embedded via includebytes! payload: 1.7 KB Build Requires Rust 1.85+: cargo buil...

cve-2026-31431-fleet-remediator

CVE-2026-31431 Fleet Audit and Remediation Tool 中文说明 This project is a fleet-scale orchestrator for auditing and remediating CVE-2026-31431 on Linux hosts in enterprise/internal networks. Batch SSH login to multiple hosts Risk evidence collection and status classification Temporary mitigation...