cve-2026-31431

CVE-2026-31431 "Copy Fail" — IR 플레이북 및 탐지 패키지 CVE-2026-31431 — Linux 커널 algifaead 암호화 인터페이스의 로컬 권한 상승 취약점에 대한 프로덕션 준비 완료 IR 플레이북, 탐지 규칙 및 SOC 트리아지 가이드입니다. 대화형 HTML 플레이북 , Sigma 규칙, auditd 구성, Falco 컨테이너 규칙, Wazuh 상관 관계 규칙, YARA 시그니처, eBPF 실시간 모니터 및 Splunk, Sentinel KQL, Elastic EQL, QRadar AQL 전반...

cve-2026-31431-mitigation

CVE-2026-31431 완화 스크립트 이 저장소는 Linux 커널 로컬 권한 상승 취약점인 CVE-2026-31431에 대한 임시 완화 및 롤백 스크립트를 제공합니다. 면책 조항 이는 영구적인 수정이 아닌 임시 해결책입니다. 사용에 따른 책임은 본인에게 있습니다. 프로덕션 시스템에 적용하기 전에 항상 비프로덕션 환경에서 테스트하십시오. 공식 공급업체 패치가 제공되는 즉시 적용하십시오. 취약점 정보 CVE-2026-31431은 Linux 커널의 로컬 권한 상승 취약점입니다. 비권한 사용자가 커널 암호화 인터페이스AFALG를...

PT-2026-85713

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove crypto rng interface qcom-rng.c exposes the same hardware through two completely separate interfaces, crypto rng and hwrng. However, the implementation of this is buggy because it permits generation...

linux-copy-fail-exploit

CVE-2026-31431 Copy Fail - LPE Exploit PoC !Pythonhttps:...

ALSA-2026:13577 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nvme: avoid double free special payload CVE-2024-41073 kernel: net: qlogic/qede: fix potential out-of-bounds read in qedetpacont and qedetpaend CVE-2025-40252 kernel: crypto: asymmetricke...

EUVD-2026-26642

In the Linux kernel, the following vulnerability has been resolved: crypto: af-alg - fix NULL pointer dereference in scatterwalk The AFALG interface fails to unmark the end of a Scatter/Gather List SGL when chaining a new afalgtsgl structure. If a sendmsg fills an SGL exactly to MAXSGLENTS, the...

PT-2026-36374

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The tegra crypto driver fails to set the CRYPTO ALG ASYNC flag on its asynchronous algorithms. This causes the crypto API to incorrectly select these algorithms for users requesting only...

Exploit for CVE-2026-31431

copy.fail — AFALG AEAD splice primitive - CVE-2026-31431 C por...

CVE-2026-31677 crypto: af_alg - limit RX SG extraction by receive buffer budget

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - limit RX SG extraction by receive buffer budget Make afalggetrsgl limit each RX scatterlist extraction to the remaining receive buffer budget. afalggetrsgl currently uses afalgreadable only as a gate before...

AZL-74612 CVE-2025-71113 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - zero initialize memory allocated via sockkmalloc Several crypto user API contexts and requests allocated with sockkmalloc were left uninitialized, relying on callers to set fields explicitly. This resulted in the...

CVE-2022-50814

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/zip - fix mismatch in get/set sglsgenr KASAN reported this Bug: 17619.659757 BUG: KASAN: global-out-of-bounds in paramgetint+0x34/0x60 17619.673193 Read of size 4 at addr fffff01332d7ed00 by task readall/1507958...

CVE-2023-53799

In the Linux kernel, the following vulnerability has been resolved: crypto: api - Use work queue in cryptodestroyinstance The function cryptodropspawn expects to be called in process context. However, when an instance is unregistered while it still has active users, the last user may cause the...

CVE-2023-53799 crypto: api - Use work queue in crypto_destroy_instance

In the Linux kernel, the following vulnerability has been resolved: crypto: api - Use work queue in cryptodestroyinstance The function cryptodropspawn expects to be called in process context. However, when an instance is unregistered while it still has active users, the last user may cause the...

The vulnerability of the XWiki Crypto API interface of the XWiki Platform, a platform for creating collaborative web applications, allows a perpetrator to execute arbitrary code.

The vulnerability of the XWiki Crypto API interface of the XWiki Platform, a platform for creating collaborative web applications, is related to the generation of X509 certificates, which are signed by default using SHA1. Exploiting this vulnerability could allow a malicious actor to execute...

The vulnerability of the programming interface of Windows CryptoAPI on Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Windows CryptoAPI programming interface on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux Kernel Crypto API Local Security Bypass Vulnerability (CNVD-2015-00753)

Linux is an open source computer operating system kernel. A local security bypass vulnerability exists in the Linux Kernel Crypto API, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

openSUSE Security Update : kernel (openSUSE-SU-2012:0206-1)

The openSUSE 11.3 kernel was updated to fix various bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used...

openSUSE Security Update : kernel (openSUSE-SU-2012:0236-1)

The openSUSE 11.4 kernel was updated to fix bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used. CVE-2011-269...

kernel: security and bugfix update. (important)

The openSUSE 11.4 kernel was updated to fix bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used. CVE-2011-269...