CVE-2026-82429 Apache Storm Worker Launcher: Local Privilege Escalation to Root via a Time-of-Check Race in the Worker Launcher

Description The setuid-root worker-launcher binary adjusts ownership and permissions of worker directories by walking the tree with FTS and calling lchown and chmod on each entry's full pathname while running with an effective uid of 0. Both syscalls re-resolve the path at the time of the call,...

CVE-2026-31431

🔥 CVE-2026-31431 - "Copy Fail !!!" A surprisingly simple yet deadly local privilege escalation in the Linux kernel 📌 Overview CVE-2026-31431 nicknamed "Copy Fail" is a local privilege escalation vulnerability in the Linux kernel's cryptographic subsystem, specifically affecting the algifaead...

CVE-2021-41091

CVE-2021-41091 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. Vulnerability Summary CVE-2021-41091 is a flaw in Moby Docker Engine that allows...

cve-2026-31431-checker

CVE-2026-31431 "Copy Fail" — Vulnerability Detection Script Shell-based scanner for CVE-2026-31431 "Copy Fail" , a local privilege escalation vulnerability in the Linux kernel's cryptographic subsystem algifaead / AFALG interface. An unprivileged local user can write 4 bytes into the in-memory pa...

CVE-2026-46331-pedit-cow

CVE-2026-46331-pedit-cow Write-up and exploitation steps for the pedit COW vulnerability CVE-2026-46331. Overview This challenge demonstrates pedit COW, a Linux kernel flaw in the traffic-control subsystem's packet-editing action actpedit. The vulnerability allows an unprivileged user to overwrit...

CVE-2026-31431-python-copyfail-POC

CVE-2026-31431: Copy Fail - Linux Kernel Privilege Escalation Copy Fail CVE-2026-31431 is a critical logic bug in the Linux kernel's cryptographic subsystem that allows unprivileged users to achieve privilege escalation to root. The vulnerability affects Linux kernels 6.0.0 through 6.18.x across...

CVE-2026-31431-PoC

CVE-2026-31431 PoC Local Privilege Escalation in the Linux Kernel via algifaead Page Cache Write "Copy Fail" Author: Van Glenndon Enad Original Discovery: Theori / Xint Code Research Team Taeyang Lee Published: April 29, 2026 Severity: High CVSS v3.1 Score: 7.8 CVSS v3.1 Vector:...

copy-fail-CVE-2026-31431

CVE-2026-31431 — Copy Fail 732 bytes. Any distro. Root. A straight-line logic flaw in the Linux kernel's authencesn cryptographic template enables an unprivileged local user to perform a precise, controlled 4-byte write into the page cache of any readable file — including setuid binaries. No race...

copy-fail-mitigate-no-reboot

copy-fail-mitigate Minimal no-reboot mitigation helper for Copy Fail / CVE-2026-31431. This script disables the vulnerable algifaead module path and attempts to unload the module immediately. It also performs a best-effort page-cache eviction for /usr/bin/su. This is a mitigation, not a kernel fi...

Copy_Grail

copygrail | copy-fail-CVE-2026-31431 copygrail is a compact, single-file C++ implementation of the CVE-2026-31431 "Copy Fail" local privilege escalation vulnerability. It showcases a clean AFALG + splice page cache corruption technique that can be used to overwrite a setuid binary and escalate...

CVE-2026-31431

🚨 CVE-2026-31431: Copy Fail A critical 9-year-old flaw in the Linux kernel that allows obtaining root access in seconds 📋 Executive Summary Attribute| Details ---|--- CVE| CVE-2026-31431 Nickname| Copy Fail Type| Local Privilege Escalation LPE CVSS| 7.8 High Discovered by| Theori Xint Code...

CVE-2026-31431-Checker-Mitigator

CVE-2026-31431 Checker & Mitigator A simple, safe vulnerability scanner and mitigation tool for CVE-2026-31431 aka "Copy Fail", a local privilege escalation vulnerability in the Linux kernel's AFALG cryptographic interface. Note - It is fully vibe coded Script About the Vulnerability CVE :...

Copy-Fail

CVE-2026-31431 – "Copy Fail" Reachability Checker A simple, safe Python script that determines whether a Linux system is vulnerable to CVE-2026-31431 "Copy Fail", a local privilege escalation that affects all major distributions since kernel 4.14. ⚠️ What is Copy Fail? CVE-2026-31431 is a...

CVE-2026-31431-cleaned

copyFail.py — CVE Exploit Analysis Report Summary copyFail.py is a proof-of-concept PoC exploit that demonstrates a local privilege escalation vulnerability in the Linux kernel. By abusing the splice system call in combination with crafted socket options, the exploit gains the ability to corrupt...

CVE-2026-31431-Copy-Fail-Detection-Toolkit

CVE-2026-31431 Copy Fail Detection Toolkit Detection and analysis toolkit for CVE-2026-31431 "Copy Fail" - a critical Linux Local Privilege Escalation vulnerability affecting distributions from 2017 onwards. Vulnerability Overview CVE-2026-31431 exploits a logic flaw in the Linux kernel's algifae...

CVE-2026-31431

CVE-2026-31431 — "Copy Fail" Local Privilege Escalation in the Linux Kernel crypto algifaead subsystem. Overview CVE-2026-31431, dubbed "Copy Fail", is a logic bug in the Linux kernel's authencesn cryptographic template algifaead. It allows an unprivileged local user to perform a controlled 4-byt...

copy_fail

Copy Fail — CVE-2026-31431 CVE-2026-31431 Copy Fail is a local privilege escalation vulnerability in the Linux kernel's algifaead module AFALG subsystem. A logic flaw introduced in August 2017 allows any unprivileged local user to write 4 controlled bytes into the page cache of any readable file...

Copy-Fail-CVE-2026-31431

Copy-Fail-CVE-2026-31431 A proof-of-concept exploit reproduction of the Linux kernel vulnerability CVE-2026-31431 , also known as Copy Fail. Credits to: Copy Fail Affected Systems Linux kernel versions 4.14 and newer Most major distributions released from 2017 until patch deployment Ubuntu, Debia...

CVE-2026-31431

CVE-2026-31431 — Local Privilege Escalation via AFALG 2026-04-29 — I am publishing this exploit one day after sharing it on theMyDigitalLife forum. It does not require Python; it is written in C and compiled to the smallest possible size using: root@kitploit: musl-gcc -static -Os -o exploit...

CVE-2021-4034

Study Project CVE-2021-4034 PwnKit This repository contains the materials, code examples, and documentation for the study project within the elective module Applied IT Security about the security vulnerability CVE-2021-4034 , also known as PwnKit. Summary This study project within the elective...