314 matches found
CVE-2026-31431
CVE-2026-31431 Copy Fail - CVE-2026-31431 Detail https://nvd.nist.gov/vuln/detail/CVE-2026-31431 https://copy.fail/exploit https://xint.io/blog/copy-fail-linux-distributions Tested Distro / Version Distro| Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023...
CopyFail-CVE-2026-31431
CopyFail: CVE-2026-31431 Python implementation of copy.fail. Overwrites the page cache of a setuid-root binary via AFALG + splice to get root. No race, no offsets works on any Linux distro since 2017. Requirements Python 3.6+ 3.12+ uses os.splice natively; older versions fall back to ctypes Linux...
copy-fail-c
Copy Fail CVE-2026-31431 - C port English en ā ę„ę¬čŖ ja ā ē®ä½äøę zh-cn ā ķźµģ“ ko ā Š ŃŃŃŠŗŠøŠ¹ ru A cross-platform C reimplementation of the Copy Fail Linux LPE CVE-2026-31431, disclosed 2026-04-29 by Theori / Xint. See the canonical writeup at copy.fail for the full vulnerability description, timeline, a...
Copy-Fail-CVE-2026-31431-Kubernetes-PoC
Copy Fail CVE-2026-31431 ā Kubernetes Container Escape PoC A proof-of-concept demonstrating how a fully unprivileged container can achieve node-level code execution on Kubernetes by exploiting the CVE-2026-31431 Linux kernel page-cache corruption bug through shared container image layers. The cor...
kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000
A flaw was found in the Linux kernel's afalg cryptography module. This vulnerability involves an arithmetic overflow when processing associated data lengths during the transmit buffer size check. A remote attacker could exploit this flaw by providing a specially crafted associated data length,...
CVE-2026-31431_je_sappelle_RoOt
CVE-2026-31431 - Copy Fail - Je s'appelle ROOT ! š Repository Purpose This repository documents the CVE-2026-31431 vulnerability, nicknamed Copy Fail , and provides a defensive remediation procedure for potentially exposed Linux systems. ā ļø This repository is strictly focused on defense, authorize...
rootpacket-cve-2026-31431
rootpacket CVE-2026-31431 A Linux Docker-to-host cryptojacking toolkit captured from live attacks on Kinryū Labs honeypots. It breaks in through an exposed Docker Engine API, escapes the container to root the host with CVE-2026-31431 , installs a kernel rootkit, and runs an XMRig Monero miner. Fu...
page_inject
pageinject - AFALG aead cross-container escape AFALG aead vulnerability cross-container exploit -- pivot from one compromised container into every sibling container that shares the samelibc.so.6 image layer. This is an escape primitive : it runs from inside an unprivileged container that the...
CVE-2025-39964
Linux afalg concurrent-write race ā patch-status tracking site Source for the CVE-2025-39964 patch-status tracker: a single-page site recording which distributions have shipped a fix for a race condition in the Linux kernel's AFALG cryptographic socket API, exploitable by a local user for kernel...
cve-2026-31431-checker
CVE-2026-31431 "Copy Fail" ā Vulnerability Detection Script Shell-based scanner for CVE-2026-31431 "Copy Fail" , a local privilege escalation vulnerability in the Linux kernel's cryptographic subsystem algifaead / AFALG interface. An unprivileged local user can write 4 bytes into the in-memory pa...
copyfail
Copy Fail CVE-2026-31431 ā ćØćÆć¹ććć¤ćä½æēØć¬ć¤ć å ć®ReadmećÆ @painoob ććåå¾ 2017 / 2016 仄éć®ćć¹ć¦ć®ć«ć¼ćć«ćć¼ćøć§ć³ćčå¼±ć§ćļ¼ć«ć¼ćć«7ćÆå®å Øć«å ē«ćććććć®ä»ļ¼5ć7ć®éļ¼ćÆä¾ē¶ćØćć¦čå¼±ć§ććåÆč½ę§ćććć¾ć ā ļø å č²¬äŗé ćć®ć³ć³ćć³ććÆęč²ććć³čرåÆćććć»ćć„ćŖćć£ćć¹ćć®ćæćē®ēćØćć¦ćć¾ććęē¤ŗēćŖčرåÆćŖćć·ć¹ćć äøć§ćććå®č”ććŖćć§ćć ććć š ę¦č¦ Copy Fail CVE-2026-31431 ćÆćAFALG...
cve-2026-31431
CVE-2026-31431 ā Copy Fail: Linux Kernel LPE Research Lab Educational purposes only. Do NOT use on systems without explicit authorization. Index Description of the vulnerability Affected components How it works Lab setup Docker PoC ā Demonstration Mitigation References Vulnerability Description...
CVE-2026-31431_SCA_WAZUH
Wazuh SCA policy: Copy Fail CVE-2026-31431 This policy file: copy-fail-cve-2026-31431-policy.yml is designed to detect likely exposure and mitigation status for Copy Fail / CVE-2026-31431. What this policy checks 1. algifaead is disabled via modprobe policy. 2. algifaead is not currently loaded. ...
Copy-Fail-CVE-2026-31431-Kubernetes-PoC
Copy Fail CVE-2026-31431 ā Kubernetes Container Escape PoC A proof-of-concept demonstrating how a fully unprivileged container can achieve node-level code execution on Kubernetes by exploiting the CVE-2026-31431 Linux kernel page-cache corruption bug through shared container image layers...
CVE-2026-31431-Checker-Mitigator
CVE-2026-31431 Checker & Mitigator A simple, safe vulnerability scanner and mitigation tool for CVE-2026-31431 aka "Copy Fail", a local privilege escalation vulnerability in the Linux kernel's AFALG cryptographic interface. Note - It is fully vibe coded Script About the Vulnerability CVE :...
copyfail-exploit
Copy Fail Ā· CVE-2026-31431 Linuxć«ć¼ćć«4.11ćććććé©ēØęøćæć®6.18ćŖćŖć¼ć¹ęŖęŗć¾ć§ć®ćć¼ć«ć«ęØ©éęę ¼ć ćć®ćć°ćÆć«ć¼ćć«ć®AFALGć½ć±ććć¤ć³ćæć¼ćć§ć¼ć¹ć«ååØććå ·ä½ēć«ćÆauthencesnćć¤ć³ćć¬ć¼ć¹AEAD復å·äøć«scatter-gatherćŖć¹ććå¦ēććę¹ę³ć«čµ·å ćć¾ććēµęćØćć¦ćęØ©éć®ćŖćć¦ć¼ć¶ć¼ćä»»ęć®čŖćæåćåÆč½ćŖćć”ć¤ć«ć®ćć¼ćøćć£ćć·ć„å ć®4ćć¤ććäøåŗ¦ć«äøęøćć§ćć¾ćć...
copyfail-exploit
Copy Fail Ā· CVE-2026-31431 Local privilege escalation on Linux kernels from 4.11 up to but not including the patched 6.18 releases. The bug lives in the kernel's AFALG socket interfaceāspecifically how authencesn handles scatter-gather lists during ināplace AEAD decryption. The result: an...
CVE-2026-31431
CVE-2026-31431 ā Copy Fail Local Privilege Escalation in the Linux kernel's authencesn cryptographic template via AFALG + splice. Disclosed April 29, 2026 by Theori Xint Code. Overview Field| Detail ---|--- CVE| CVE-2026-31431 Nickname| Copy Fail CVSS| 7.8 HIGH Type| Local Privilege Escalation LP...
CVE-2026-31431
Copy Fail - CVE-2026-31431 This repository contains a small Linux local privilege escalation PoC for CVE-2026-31431, also known as "Copy Fail". The exploit targets the Linux kernel algifaead path in the AFALG userspace crypto API. It uses AFALG plus splice to coerce the kernel into writing into t...
copy-fail
CopyFail Mitigation CVE-2026-31431 - Multi-Distribution Guide This repository contains detailed tutorials and scripts to mitigate the CopyFail vulnerability CVE-2026-31431. This flaw affects the Linux Kernel cryptography subsystem AFALG and allows local privilege escalation LPE from a regular use...