208 matches found
cve-2020-0601_poc
Basic Info The source code of this tool is supposed to help with understanding of CVE-2020-0601 vulnerability discovered in Windows Crypto API, see CERT's overview. The tool itself can be used to produce a certificate for an arbitrary domain which will be signed by an evil certificate authority...
OCI-Ansible-Fix-CVE-2026-31431
CVE-2026-31431 Ansible Remediation This playbook remediates CVE-2026-31431, also known as Copy Fail, on Linux instances in OCI. CVE-2026-31431 is a local privilege escalation issue in the Linux kernel algifaead implementation used by the AFALG userspace crypto API. This playbook applies the main...
cve-2026-31431-mitigation
CVE-2026-31431 Copy Fail – Technical Mitigation Tooling 1. Overview This package provides an automated solution to detect and mitigate the CVE-2026-31431 vulnerability aka Copy Fail on Linux systems running affected kernels versions 4.14 through 6.12.84, 6.13 through 6.18.21, etc.. The tooling...
CVE-2026-31431
CVE-2026-31431: "Copy Fail" - تصعيد الامتيازات المحلي في نواة لينكس 📢 إخلاء مسؤولية هذا المستودع مخصص لأغراض تعليمية وبحوث الأمن السيبراني فقط. يتم تحليل كود الاستغلال لفهم الثغرة الأساسية، وتسهيل التصحيح، وتطوير استراتيجيات دفاعية. لا تستخدم هذا ضد أنظمة لا تملكها أو ليس لديك إذن صريح لاختبارها....
c-copy-fail
CopyFail ثغرة CVE-2026-31431 في واجهة برمجة تطبيقات التشفير Crypto API لنواة لينكس الموارد: الموقع الرئيسي استدعاءات النظام لمعمارية aarch64 pwntools لتوليد الكود البرمجي كيفية عمل البيانات الإضافية في sendmsg...
CVE-2026-31431
CVE-2026-31431 LPE PoC تنفيذ بلغة Rust هذا المشروع هو إثبات مفهوم PoC مُنفَّذ بلغة Rust لثغرة تصعيد الامتيازات المحلية LPE محاكاة لـ CVE-2026-31431. يوضح كيفية التلاعب بذاكرة التخزين المؤقت للصفحات في نواة لينكس من خلال استغلال Crypto API.cite: 1, 2 !CAUTION هذا الكود مخصص لأغراض البحث الأمني...
deny-af-alg-bpf
deny-af-alg-bpf الوصف برنامج BPF LSM يمنع إنشاء مآخذ AFALG واجهة برمجة التشفير في نواة لينكس ويسجّل جميع المحاولات عبر حلقة تخزين مؤقت ring buffer إلى مساحة المستخدم. ماذا يفعل يرتبط بخطاف lsm/socketcreate يرفض أي استدعاء socketAFALG, ... مع -EPERM يُصدر أحداثًا منظمة pid, comm إلى حلقة تخزين مؤق...
mks-copy-fail-mitigation
DaemonSets لتخفيف ثغرات Copy Fail DaemonSets لمعالجة ثغرات عائلة Copy Fail على جميع عُقد العمل worker nodes في مجموعات MKS. المحتويات CVE-2026-31431 Copy Fail CVE-2026-43284, CVE-2026-43500, CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail وصف الثغرة معرف CVE: CVE-2026-31431 رابط CVE:...
CVE-2026-80565 crypto: qce - fix error path in devm_qce_register_algs
In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed registration. Use the loop index to unregister the previously registered...
Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-8662-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8662-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: smb: client: fixed UAF in async decryption Performing async decryption large read results in a crash due to a slabuseafterfree issue in the crypto API. Reproducing the issue: mount.cifs -o ...,seal,esize=1 //srv/share /mnt dd...
CVE-2026-71225 affecting package libkcapi for versions less than 1.5.1-1
CVE-2026-71225 affecting package libkcapi for versions less than 1.5.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-74578
CVE-2026-74578 affects the Linux kernel crypto/algif_skcipher path. The AIO/async path in skcipher_recvmsg() could expose an attacker-controlled IV by overwriting ctx->iv via concurrent ALG_SET_IV writes, enabling IV/keystream reuse for CTR/stream modes and potentially plaintext recovery of co...
CVE-2026-71226
Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers. Mitigation To mitigate this issue, applications should avoid initializing libkcapi handle...
CVE-2026-64439
In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...
CVE-2026-64314
This vulnerability affects the Linux kernel 's chacha20poly1305 cryptographic module. The root cause is in chachapoly_create(), which assumes the poly1305 template argument is always present and passes the result of crypto_attr_alg_name() directly to strcmp(). When the argument is missing, an err...
crypto: af_alg - Cap AEAD AD length to 0x80000000
...
Ubuntu 22.04 LTS : Linux kernel (Low Latency) vulnerabilities (USN-8351-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8351-1 advisory. It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A...
