Copy-fail-CVE-2026-31431-Exploit-in-C

Copy-fail-CVE-2026-31431-Exploit-in-C CVE-2026-31431 的发现与原始披露：Theori / Xint。公开文章：https://copy.fail/。 概述 该程序针对 Linux 内核的 AFALG AEAD 路径，并尝试触发公开公告中描述的“Copy Fail”页缓存损坏行为。 代码打开一个选定文件，反复处理内嵌载荷的 4 字节窗口，并利用内核加密管道及 splice 来影响内存中缓存的文件内容。 循环结束后，它执行目标二进制文件，依赖页缓存被遗留的任何状态。 先决条件 Linux 环境 GCC 或 Clang 构建 gcc...

Copy-Fail-CVE-2026-31431

Copy-Fail-CVE-2026-31431 A proof-of-concept exploit reproduction of the Linux kernel vulnerability CVE-2026-31431 , also known as Copy Fail. Credits to: Copy Fail Affected Systems Linux kernel versions 4.14 and newer Most major distributions released from 2017 until patch deployment Ubuntu, Debia...

CVE-2015-3331

The driverrfc4106decrypt function in arch/x86/crypto/aesni-intelglue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service buffer overflow and system crash or possibly...

CVE-2015-3331

CVE-2015-3331 affects the Linux kernel up to 3.19.2, where __driver_rfc4106_decrypt in arch/x86/crypto/aesni-intel_glue.c mishandles memory locations for encrypted data, enabling a context-dependent attacker to trigger a buffer overflow via a crypto API call (e.g., with a libkcapi test program us...

CVE-2015-3331

The driverrfc4106decrypt function in arch/x86/crypto/aesni-intelglue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service buffer overflow and system crash or possibly...