cve-2026-31431-mitigation

CVE-2026-31431 Copy Fail – Technical Mitigation Tooling 1. Overview This package provides an automated solution to detect and mitigate the CVE-2026-31431 vulnerability aka Copy Fail on Linux systems running affected kernels versions 4.14 through 6.12.84, 6.13 through 6.18.21, etc.. The tooling...

CVE-2026-31431

📌 CVE-2026-31431 – 通过 AEAD 加密套接字误用实现权限提升 🧠 概述 CVE-2026-31431 是一个 Linux 权限提升漏洞，它滥用了 AFALG（内核加密 API） 接口。通过构造与 AEAD（带关联数据的认证加密）套接字的恶意交互，攻击者可以提升权限并以 root 身份执行代码。 该漏洞利用了加密套接字操作处理不当的问题，允许受控的内存操作并最终实现权限提升。 ⚠️ 影响 本地权限提升 Root shell 访问（/usr/bin/su） 影响具有易受攻击的内核加密实现的系统 🔍 技术分析 该漏洞利用程序： 创建一个 AFALG 套接字 绑定到：...

CVE-2026-31431-CopyFail-static-ELF--POC

CVE-2026-31431: Copy Fail - 587字节静态ELF 这个漏洞不是我发现的。功劳归于 Xint Code / Theori。 这个仓库是我对如何将漏洞利用做到尽可能小的尝试——一个 手工编写的x8664 ELF，仅用587字节完成完整的本地提权。没有libc，没有 链接器，没有运行时。只有NASM和固执。 实际上，内核通过AFALG + splice将写入原语交给你， 可以写入任何可读文件的页缓存。将其指向setuid 二进制的入口点，写入shellcode，执行该二进制，获得root。 关于体积的参考：原始的公开Copy Fail文章附带了一个微型...

Unbreakable Enterprise kernel security update

5.15.0-320.202.8.2 - xfrm: esp: ipv4: fix up flags setting Greg Kroah-Hartman Orabug: 39344515 CVE-2026-43284 - xfrm: esp: avoid in-place decrypt on shared skb frags Kuan-Ting Chen Orabug: 39344515 CVE-2026-43284 5.15.0-320.202.8.1 - x86/CPU/AMD: Add a fix for AMD-SB-7052 Prathyushi Nangia Orabug...

SUSE-SU-2026:21521-1 Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues The following security issues were fixed: - CVE-2026-23204: net/sched: clsu32: use skbheaderpointercareful bsc1259126. - CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy...

ALSA-2026:13577 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nvme: avoid double free special payload CVE-2024-41073 kernel: net: qlogic/qede: fix potential out-of-bounds read in qedetpacont and qedetpaend CVE-2025-40252 kernel: crypto: asymmetricke...

CVE_2026_31431-Testing-the-Copy-Fail-exploit

CVE-2026-31431 Exploit Toolkit A comprehensive toolkit for de...

Unbreakable Enterprise kernel security update: Copy Fail

5.15.0-319.201.4.4 - crypto: algifaead - Fix minimum RX size check for decryption Herbert Xu Orabug: 39291961 - crypto: afalg - Fix page reassignment overflow in afalgpulltsgl Herbert Xu Orabug: 39291961 - crypto: authencesn - Fix src offset when decrypting in-place Herbert Xu Orabug: 39291961 -...

CVE-2024-50281 KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation When sealing or unsealing a key blob we currently do not wait for the AEAD cipher operation to finish and simply return after submitting the request. If there is...

CVE-2024-50281

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation When sealing or unsealing a key blob we currently do not wait for the AEAD cipher operation to finish and simply return after submitting the request. If there is...

CVE-2024-50281

CVE-2024-50281 affects the Linux kernel’s key management component, specifically the trusted: dcp path. The vulnerability stems from sealing/unsealing a key blob where the AEAD cipher operation is submitted but not waited for, allowing a race that can lead to a NULL pointer dereference in the DCP...