vcheck

vcheck Audit a remote Linux host over SSH for the Copy Fail and Dirty Frag kernel-module vulnerabilities and, optionally, apply mitigations:...

copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Technical Writeup Tested Distro / Version Distro| Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1| 6.12.0-124.45.1.el101 SUSE 16| 6.12.0-160000.9-default...

copy-fail-CVE-2026-31431-detection-probe

Linux Kernel LPE Probe Suite — Copy Fail & Dirty Frag Safe detection tooling for two related Linux kernel local privilege escalation vulnerability families — Copy Fail CVE-2026-31431 and Dirty Frag CVE-2026-43284 / CVE-2026-43500 — both affecting all major distributions since 2017, both exploitab...

cve_2026_31431

CVE-2026-31431 "Copy Fail" Toolkit Detector and proof-of-concept LPE for the Linux algifaead / authencesn page-cache scratch-write bug disclosed 2026-04-29. Disclosure writeup: https://xint.io/blog/copy-fail-linux-distributions Authorization Use only on hosts you own or are explicitly engaged to...

cve-2026-31431

CVE-2026-31431 — Linux Kernel algifaead "Copy Fail": Analysis Security research on CVE-2026-31431 CVSS 3.1 7.8 HIGH , AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H: three composable design flaws in the AFALG AEAD interface chain into a deterministic, race-free 4-byte page-cache write at any offset of any...

copy-fail-CVE-2026-31431-cpp

This repository does not have a README...

CVE-2026-31431

CVE-2026-31431 "Copy Fail" - Research & Pentesting Tool ⚠️ DISCLAIMER This project is provided strictly for: Security research Educational purposes Authorized penetration testing CTF and laboratory environments By using this tool, you agree that: You own the target system or You have explicit...

CVE-2026-31431_SCA_WAZUH

Wazuh SCA policy: Copy Fail CVE-2026-31431 This policy file: copy-fail-cve-2026-31431-policy.yml is designed to detect likely exposure and mitigation status for Copy Fail / CVE-2026-31431. What this policy checks 1. algifaead is disabled via modprobe policy. 2. algifaead is not currently loaded. ...

OCI-Ansible-Fix-CVE-2026-31431

CVE-2026-31431 Corrección con Ansible Este playbook corrige CVE-2026-31431, también conocido como Copy Fail, en instancias Linux en OCI. CVE-2026-31431 es un problema de escalada de privilegios local en la implementación algifaead del kernel de Linux utilizada por la API de criptografía en espaci...

cve-2026-31431-mitigation

CVE-2026-31431 Copy Fail – Technical Mitigation Tooling 1. Overview This package provides an automated solution to detect and mitigate the CVE-2026-31431 vulnerability aka Copy Fail on Linux systems running affected kernels versions 4.14 through 6.12.84, 6.13 through 6.18.21, etc.. The tooling...

copy-fail-mitigation-with-bpftrace

copy-fail-mitigation-with-bpftrace CVE-2026-31431, AKA Copy Fail, can be mitigated in one-line with bpftrace, no kpatch building, no cargo building English Version | 中文版本 Idea To exploit Copy Fail, you need to bind socket AFALG and use algorithm authencesn , which most applications don't use a lo...

copyfail-arm64

Copy Fail ARM64 Research CVE-2026-31431 Analysis and ARM64 reproduction of the Copy Fail Linux kernel privilege escalation vulnerability CVE-2026-31431, originally disclosed by Xint. Blog post: docs/post.md What's Included File| Description ---|--- docs/post.md| Blog post covering the vulnerabili...

cve-2026-31431-checker

CVE-2026-31431 Copy Fail Detection Tool A comprehensive detection and analysis tool for CVE-2026-31431 "Copy Fail" vulnerability in Linux kernels. ⚠️ IMPORTANT DISCLAIMER This tool is for DETECTION ONLY. It does not exploit or modify any system files. Only reads system information and configuratio...

copy-fail

copy-fail PoC of CVE-2026-31431 USAGE: wget https://raw.githubusercontent.com/pedromizz/copy-fail/main/poc.py python3 poc.py $ id uid=0root pedromizz :...

copy-fail-CVE-2026-31431

Copy Fail CVE-2026-31431 - PoC This repository contains a Proof of Concept PoC for the Copy Fail CVE-2026-31431 vulnerability. ⚠️ Disclaimer: This project is for educational and research purposes only. Do NOT use this on systems you do not own or do not have permission to test. 🧪 Usage Follow the...

copy-fail-CVE-2026-31431

CVE-2026-31431 Copy Fail exploit Author: pyroceper Tested on: Ubuntu 25.10 x8664 root@kitploit: $ make $ ./exploit Detected kernel: 6.17.0 Making backup of /etc/passwd to /tmp Backup saved as /tmp/passwd.bak Obtaining root shell... id uid=0pwn gid=0root groups=0root whoami pwn CREDITS & REFERENCE...

CVE-2026-31431-live-process-code-injection

CVE-2026-31431 Copy Fail — Live Process Code Injection PoC Demonstrates arbitrary code execution in a running process via page cache. by @secinfosex What it does: 1. Compiles a test binary: check return 42; in an infinite loop 2. Launches the process 3. Waits for "check = 42" output 4. Replaces...

afalg-check

Itsumma AFALG Check Diagnostic utility for Linux that checks: availability of AFALG / algifaead and helps assess the risk of CVE-2026-31431 copy-fail; the presence of an attack surface for the Dirty Frag vulnerability class xfrm-ESP Page-Cache Write + RxRPC Page-Cache Write chain across the esp4,...

cve-2026-31431-copy-fail

CVE-2026-31431 "Copy Fail" Scanner & Patch Helper Copy Fail is an automated security scanner and patch helper for detecting and remediating the CVE-2026-31431 vulnerability Linux Kernel algifaead Local Privilege Escalation across your Linux infrastructure. Table of Contents Description Key Featur...

play-go-copy-fail-cve-2026-31431

Play Go Copy Fail CVE-2026-31431 Purpose Learn linux syscall low-level Port python and c into golang Craft own payload then exploit as newbie Auto upgrade pty manually Inspiration tgies/copy-fail-c painoob/Copy-Fail-Exploit-CVE-2026-31431 Resource Linux Source Crypto...