CVE-2026-31431

CVE-2026-31431 - Copy Fail PoC Educational Proof of Concept for CVE-2026-31431 , also known as Copy Fail , a Linux kernel local privilege escalation vulnerability involving the AFALG / algifaead cryptographic interface. !WARNING This repository is provided strictly for educational, defensive, and...

CVE-2026-31431

Author: 0xShe Language / 语言 English: https://github.com/0xShe/CVE-2026-31431/blob/main/README.md 中文: https://github.com/0xShe/CVE-2026-31431/blob/main/README-CN.md CVE-2026-31431 Kernel Privilege Escalation Tool Guide 0x01 Quick Start Some target environments do not have Python installed, so this...

Copyfail-sh

copyfail-sh No race. No offsets. No prebuilt binary to blindly trust. A bash implementation of CVE-2026-31431 Copy Fail. The script compiles a minimal C helper inline at runtime. The bash layer handles architecture detection, payload decompression and target selection; the C layer does the actual...

CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention

🔴 CVE-2026-31431 — Copy Fail Linux Kernel Local Privilege Escalation LPE — Defensive Research Repository 📖 Overview Copy Fail CVE-2026-31431 is a Local Privilege Escalation LPE vulnerability affecting the Linux kernel via controlled corruption of the page cache through the AFALG, splice and...

copy_fail

copyfail Research Notes CVE-2026-31431 English 简体中文 This repository is a defensive research workspace for studying the Linux copyfail vulnerability tracked as CVE-2026-31431. The goal of this repository is to preserve analysis notes, document impact, and support safe local assessment. It is not...

copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe

Copy Fail CVE-2026-31431 - Vulnerability Checker Conceptual validation script for CVE-2026-31431 "Copy Fail" — a Linux kernel local privilege escalation via algifaead page-cache write. Vulnerability CVE-2026-31431 is a logic bug in the Linux kernel's authencesn AEAD template. When combined with...

CVE-2026-31431-C

copy-fail CVE-2026-31431 Copy Fail C language PoC, logically aligned with the original Python exploit theori-io/copy-fail-CVE-2026-31431. For authorized security research and experimental environments only. Do not use on unauthorized systems. Brief Principle In Linux AFALG,...

Detection-Tool-Kit-for-CVE-2026-31431

copyfail-detect Detection toolkit for CVE-2026-31431 "Copy Fail", a Linux kernel local privilege escalation technique that corrupts page-cache data without changing the file on disk. Why This Exists Copy Fail can bypass traditional file integrity monitoring because the on-disk file is not modifie...

OCI-Ansible-Fix-CVE-2026-31431

CVE-2026-31431 Ansible Remediation This playbook remediates CVE-2026-31431, also known as Copy Fail, on Linux instances in OCI. CVE-2026-31431 is a local privilege escalation issue in the Linux kernel algifaead implementation used by the AFALG userspace crypto API. This playbook applies the main...

CVE-2026-31431

CVE-2026-31431 Vulnerability Overview CVE ID：CVE-2026-31431 Alias：Copy Fail Severity：High CVSS v3 Score 7.8 Vulnerability Type：Local Privilege Escalation LPE Affected Component：The algifaead module AFALG cryptographic interface of the Linux kernel Prerequisites：The attacker only needs a normal us...

kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

A race condition was found in the Linux kernel cryptographic user API, AFALG in the way concurrent writes to the same AFALG socket are handled. Interleaved data and inconsistent internal socket state may result. A local user could use this flaw to crash the system or corrupt cryptographic operati...

CentOS 9 : kernel-5.14.0-754.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-754.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Cap AEAD AD length to 0x80000000 In order to preven...

CVE-2026-31431-EXPLOIT

CVE-2026-31431 - 복사 실패 이 취약점은 권한 없는 로컬 공격자 가 취약한 Linux 시스템에서 루트 권한 을 획득할 수 있게 합니다. ⚠️ 면책 조항 이 코드는 교육 및 보안 연구 목적으로만 제공됩니다. 이 코드는 Linux 커널의 AFALG 소켓 인터페이스에서 가상의 취약점CVE-2026-31431을 시연합니다. 소유하지 않았거나 명시적인 서면 허가를 받지 않은 시스템에서는 이 코드를 실행하지 마십시오. 이 코드의 오용은 법률과 규정을 위반할 수 있습니다. 📜 설명 CVE-2026-314312026년 공개은...

kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000

A flaw was found in the Linux kernel's afalg cryptography module. This vulnerability involves an arithmetic overflow when processing associated data lengths during the transmit buffer size check. A remote attacker could exploit this flaw by providing a specially crafted associated data length,...

Critical: Red Hat Security Advisory: kernel security update

An update for kernel is now available for NVIDIA for RHEL 10. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

A race condition was found in the Linux kernel cryptographic user API, AFALG in the way concurrent writes to the same AFALG socket are handled. Interleaved data and inconsistent internal socket state may result. A local user could use this flaw to crash the system or corrupt cryptographic operati...

kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

A race condition was found in the Linux kernel cryptographic user API, AFALG in the way concurrent writes to the same AFALG socket are handled. Interleaved data and inconsistent internal socket state may result. A local user could use this flaw to crash the system or corrupt cryptographic operati...

kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

A race condition was found in the Linux kernel cryptographic user API, AFALG in the way concurrent writes to the same AFALG socket are handled. Interleaved data and inconsistent internal socket state may result. A local user could use this flaw to crash the system or corrupt cryptographic operati...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

A race condition was found in the Linux kernel cryptographic user API, AFALG in the way concurrent writes to the same AFALG socket are handled. Interleaved data and inconsistent internal socket state may result. A local user could use this flaw to crash the system or corrupt cryptographic operati...