CVE-2026-31431-EXPLOIT

CVE-2026-31431 - प्रतिलिपि विफल यह कमजोरी एक अनधिकृत स्थानीय हमलावर को एक कमजोर लिनक्स सिस्टम पर रूट विशेषाधिकार प्राप्त करने की अनुमति देती है। ⚠️ अस्वीकरण यह कोड केवल शैक्षिक और सुरक्षा अनुसंधान उद्देश्यों के लिए प्रदान किया गया है। यह लिनक्स कर्नेल के AFALG सॉकेट इंटरफेस में एक काल्पनिक कमजोरी...

d8-copy-fail-mitigation

تخفيف CVE-2026-31431 لمنصة Deckhouse Kubernetes اللغة: English | Русский حول الثغرة الأمنية CVE-2026-31431 هي ثغرة أمنية في وحدة algifaead الخاصة بنواة لينكس، والتي تعرض واجهة برمجة تطبيقات التشفير الخاصة بالنواة لمساحة المستخدم من خلال عائلة مآخذ AFALG. وجود خلل في واجهة AEAD التشفير الموثّق مع...

Copyfail-sh

copyfail-sh कोई रेस नहीं। कोई ऑफसेट नहीं। कोई प्रीबिल्ट बाइनरी नहीं जिस पर आँख बंद करके भरोसा करना पड़े। CVE-2026-31431 Copy Fail का एक bash कार्यान्वयन। यह स्क्रिप्ट रनटाइम पर एक न्यूनतम C हेल्पर को इनलाइन संकलित करती है। bash परत आर्किटेक्चर पहचान, पेलोड डीकंप्रेसन और लक्ष्य चयन को संभालती है; ...

CVE-2026-31431-check

CVE-2026-31431 जाँच algifaead स्थानीय-रूट भेद्यता CVE-2026-31431 के लिए केवल-पढ़ने योग्य जाँचकर्ता। यह कर्नेल कॉन्फ़िग, मॉड्यूल स्थिति, AFALG सॉकेट पहुंच क्षमता, और आपके द्वारा लागू किसी भी शमन उपायों की जाँच करता है, फिर एक निर्णय प्रिंट करता है। यह एक्सप्लॉइट कोड नहीं चलाता है। यह...

AZL-68460 CVE-2025-39964 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Disallow concurrent writes in afalgsendmsg Issuing two writes to the same afalg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencie...

EUVD-2016-1336

Malware in sbrugna...

EUVD-2015-8824

Malware in sbrugna...

Denial Of Service

Linux kernel is vulnerable to denial of service attacks. A user could exploit this flaw using an AFALG socket with an incompatible algorithm, as demonstrated by mcryptdmd5 causing denial of service conditions. Affected is the file crypto/mcryptd.c...

CVE-2016-10147

crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service NULL pointer dereference and system crash by using an AFALG socket with an incompatible algorithm, as demonstrated by mcryptdmd5...

CVE-2016-10147

crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service NULL pointer dereference and system crash by using an AFALG socket with an incompatible algorithm, as demonstrated by mcryptdmd5...

CVE-2016-10147

crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service NULL pointer dereference and system crash by using an AFALG socket with an incompatible algorithm, as demonstrated by mcryptdmd5...

CVE-2015-8970

crypto/algifskcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AFALG socket before an accept system call is processed, which allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted applicatio...

Null pointer dereference

crypto/algifskcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AFALG socket before an accept system call is processed, which allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted applicatio...

CVE-2015-8970

crypto/algifskcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AFALG socket before an accept system call is processed, which allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted applicatio...

CVE-2015-8970

CVE-2015-8970 affects the Linux kernel prior to 4.4.2. The vulnerability is in crypto/algif_skcipher.c where a setkey operation on an AF_ALG socket may not be verified before an accept system call is processed, allowing a local attacker to trigger a NULL pointer dereference and system crash via a...

CVE-2015-8970

crypto/algifskcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AFALG socket before an accept system call is processed, which allows local users to cause a denial of service NULL pointer dereference and system crash via a crafted applicatio...

Amazon Linux: Security Advisory (ALAS-2011-22)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : kernel (MDVSA-2015:057)

Multiple vulnerabilities has been found and corrected in the Linux kernel : The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AFALG socket with a parenthesized module template expression in the salgname field, as...

Design/Logic Flaw

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AFALG socket with a parenthesized module template expression in the salgname field, as demonstrated by the vfataes expression, a different vulnerability than...

CVE-2013-7421

CVE-2013-7421 : Linux kernel Crypto API flaw allows a local user to load arbitrary kernel modules via a bind() on an AF_ALG socket with a salg_name, in kernels before 3.18.5. This is the same class as CVE-2014-9644 and is addressed by the 3.18.5 fix (ChangeLog-3.18.5). Connected IBM and vendor ad...