CVE-2026-31431

🐞 CVE-2026-31431 - Ошибка копирования Логическая ошибка в authencesn, передаваемая через AFALG и splice, приводящая к контролируемой записи 4 байтов в кэш страниц любого читаемого файла в системе. Нет состояния гонки, нет смещений, нет скомпилированного полезного груза. Тот же самый скрипт размер...

CVE-2026-31431-Copy-Fail-add-arm64

Vulnerability Overview Item| Content ---|--- CVE ID| CVE-2026-31431 Vulnerability Name| Copy Fail Vulnerability Type| Linux Kernel Local Privilege Escalation LPE CVSS 3.1 Score| 7.8 HIGH CWE| CWE-669: Incorrect Resource Transfer Between Spheres Affected Scope| All Linux kernels built between 2017...

copy-fail-CVE-2026-31431

Vulnerability Description Root Cause In 2017, the Linux kernel crypto module authencesn introduced an in-place optimization for AEAD Authenticated Encryption with Associated Data operations. This optimization caused read-only pages in the page cache to be incorrectly placed into a writable...

CVE-2026-43284

Dirty Frag: Universelle Linux-LPE Abstract Dieses Dokument erläutert die Schwachstellenklasse Dirty Frag, entdeckt und gemeldet von Hyunwoo Kim @v4bel. Durch die Verkettung von xfrm-ESP Page-Cache Write CVE-2026-43284 mit RxRPC Page-Cache Write CVE-2026-43500 kann ein Angreifer auf großen...

CVE-2026-43284

🚨 CVE-2026-43284 - Dirty Frag 🚨 Universal Linux Kernel Local Privilege Escalation 📋 Overview Dirty Frag also known as Copy Fail 2 is a high-impact local privilege escalation vulnerability in the Linux kernel. It allows an unprivileged local user to obtain root privileges on affected systems...

copyfail-rs

copyfail-rs Rust implementation of CVE-2026-31431 Copy Fail — a Linux kernel page-cache write primitive via AFALG splice. 中文文档 / Chinese README CVE-2026-31431 The Linux kernel's algifaead implementation allows an unprivileged user to write arbitrary data into the page cache of any readable file v...

Dirty-Frag-Analysis

Dirty Frag Tiefgehende technische Analyse CVE-2026-43284 xfrm-ESP / CVE-2026-43500 RxRPC Linux-Kernel Local Privilege Escalation — PoC-Reverse Engineering · Shellcode-Analyse · Patch-Prinzip · Erkennungsskript Schwachstellenübersicht Dirty Frag nutzt durch Verkettung der beiden unabhängigen...

CVE-2026-46300

CVE-KERNEL · Linux Kernel LPE Chain लिनक्स कर्नेल कमजोरियों के लिए मल्टी-CVE स्थानीय विशेषाधिकार वृद्धि श्रृंखला uid=1000 → root xfrm-ESP, RxRPC, या Fragnesia पेज-कैश राइट के माध्यम से अवलोकन CVE-KERNEL एक Python-आधारित स्थानीय विशेषाधिकार वृद्धि LPE उपकरण है जो कई लिनक्स कर्नेल CVEs को श्रृंखलित...

dirtyfrag

Dirty Frag: LPE Linux universale Sommario Questo documento descrive la classe di vulnerabilità Dirty Frag, scoperta e segnalata per la prima volta da Hyunwoo Kim @v4bel, che può ottenere privilegi di root sulle principali distribuzioni Linux combinando la vulnerabilità xfrm-ESP Page-Cache Write...

CVE-2026-43284-dirtyfrag-detection

Verifica PoC e Rilevamento auditd per DirtyFrag CVE-2026-43284 Ambito: Verifica di escalation locale dei privilegi LPE su Linux incentrata sul percorso XFRM/ESP associato a CVE-2026-43284. Questo repository contiene un report in inglese e artefatti di prova da una validazione di laboratorio...

copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe

Copy Fail CVE-2026-31431 - Verifica vulnerabilità Script di validazione concettuale per CVE-2026-31431 "Copy Fail" — un'escalation locale dei privilegi del kernel Linux tramite scrittura nella page cache di algifaead. Vulnerabilità CVE-2026-31431 è un bug logico nel template AEAD authencesn del...

CVE-2022-22706-poc

CVE-2022-22706 - Page-Cache-Schreiben Der Arm-Mali-GPU-Treiber übergibt dem Userspace eine CPU-beschreibbare Abbildung von Seiten, die er schreibgeschützt gepinnt hat, sodass ein unprivilegierter Prozess einen beschreibbaren Alias des Page-Cache erhält, der eine Datei unterstützt, die er nur mit...

copyfail-fix

CopyFail-Fix 🌐 Inglese | Portoghese | Spagnolo | Cinese | Islandese Mitigazione e patch con un comando per CVE-2026-31431 — la vulnerabilità di escalation dei privilegi locali "Copy Fail" del kernel Linux. Lo script disabilita il modulo algifaead interessato, aggiorna il kernel tramite apt e...

CVE-2026-43284

🚨 CVE-2026-43284 — Dirty Frag 🚨 Universelle lokale Privilegieneskalation im Linux-Kernel Überblick Feld| Detail ---|--- CVE| CVE-2026-43284 xfrm/ESP + CVE-2026-43500 RxRPC Nickname| Dirty Frag CVSS| 7.8 HIGH Typ| Lokale Privilegieneskalation LPE Eingeführt| Linux-Kernel 4.10 2017, Commit...

Fragnesia-go

fragnesia-go Una SA. Un byte alla volta. Nessuna race. Porting Go di fragnesia CVE-2026-46300. Membro della classe di vulnerabilità Dirty Frag - bug separato, stessa superficie, patch propria. Come funziona tl;dr Il bug si trova nel sottosistema Linux XFRM ESP-in-TCP. Quando TCPULP espintcp viene...

copy-fail-checker

Copy Fail Checker — CVE-2026-31431 Uno script Bash piccolo e leggero in termini di dipendenze che ti dice se il tuo sistema Linux è esposto alla vulnerabilità di escalation dei privilegi locali Copy Fail CVE-2026-31431. Lo script è read-only : non sfrutta mai il bug, non carica mai moduli del...

DIRTYFAIL

DIRTYFAIL Un rilevatore e harness PoC unificati per le famiglie di vulnerabilità di scrittura cache di pagina Linux Copy Fail e Dirty Frag. ██████╗ ██╗██████╗ ████████╗██╗ ██╗███████╗ █████╗ ██╗██╗ ██╔══██╗██║██╔══██╗╚══██╔══╝╚██╗ ██╔╝██╔════╝██╔══██╗██║██║ ██║ ██║██║██████╔╝ ██║ ╚████╔╝ █████╗...

dirtyfrag

Dirty Frag: Universal Linux LPE Abstract !tuxasse...

dirtyfrag

Dirty Frag Overview Dirty Frag is a class of Linux ke...

Fragnesia LPE (CVE-2026-46300)

This module exploits CVE-2026-46300, a Linux kernel local privilege escalation vulnerability introduced in version 4.10. The flaw resides in the kernel's IPsec ESP-in-TCP handling: when an ESP-encapsulated TCP segment containing a shared fragment SKBFLSHAREDFRAG is received and decrypted, the...