cve-2026-31431

CVE-2026-31431 "Copy Fail" — Playbook de IR y Paquete de Detección Playbook de IR listo para producción, reglas de detección y guía de triaje para SOC para CVE-2026-31431 — una escalada de privilegios local del kernel de Linux en la interfaz criptográfica algifaead. Incluye un playbook HTML...

cve-2026-31431-mitigation

CVE-2026-31431 缓解脚本 本仓库为 CVE-2026-31431（一个 Linux 内核本地权限提升漏洞）提供临时缓解及回滚脚本。 免责声明 这是一个临时解决方案，并非永久修复。请自行承担使用风险。在应用于生产系统之前，务必先在非生产环境中进行测试。官方供应商补丁发布后，请尽快应用。 关于漏洞 CVE-2026-31431 是 Linux 内核中的一个本地权限提升漏洞。它允许非特权用户通过利用内核加密接口（AFALG）获取 root 权限。公开的概念验证（PoC）漏洞利用代码已经可用，并已在易受攻击的系统上成功测试。 缓解方法 该漏洞利用依赖于 AFALG...

linux-copy-fail-exploit

CVE-2026-31431 Copy Fail - LPE Exploit PoC !Pythonhttps:...

ALSA-2026:13577 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nvme: avoid double free special payload CVE-2024-41073 kernel: net: qlogic/qede: fix potential out-of-bounds read in qedetpacont and qedetpaend CVE-2025-40252 kernel: crypto: asymmetricke...

EUVD-2026-26642

In the Linux kernel, the following vulnerability has been resolved: crypto: af-alg - fix NULL pointer dereference in scatterwalk The AFALG interface fails to unmark the end of a Scatter/Gather List SGL when chaining a new afalgtsgl structure. If a sendmsg fills an SGL exactly to MAXSGLENTS, the...

PT-2026-36374

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The tegra crypto driver fails to set the CRYPTO ALG ASYNC flag on its asynchronous algorithms. This causes the crypto API to incorrectly select these algorithms for users requesting only...

Exploit for CVE-2026-31431

copy.fail — AFALG AEAD splice primitive - CVE-2026-31431 C por...

CVE-2026-31677 crypto: af_alg - limit RX SG extraction by receive buffer budget

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - limit RX SG extraction by receive buffer budget Make afalggetrsgl limit each RX scatterlist extraction to the remaining receive buffer budget. afalggetrsgl currently uses afalgreadable only as a gate before...

AZL-74612 CVE-2025-71113 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - zero initialize memory allocated via sockkmalloc Several crypto user API contexts and requests allocated with sockkmalloc were left uninitialized, relying on callers to set fields explicitly. This resulted in the...

CVE-2022-50814

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/zip - fix mismatch in get/set sglsgenr KASAN reported this Bug: 17619.659757 BUG: KASAN: global-out-of-bounds in paramgetint+0x34/0x60 17619.673193 Read of size 4 at addr fffff01332d7ed00 by task readall/1507958...

CVE-2023-53799

In the Linux kernel, the following vulnerability has been resolved: crypto: api - Use work queue in cryptodestroyinstance The function cryptodropspawn expects to be called in process context. However, when an instance is unregistered while it still has active users, the last user may cause the...

CVE-2023-53799 crypto: api - Use work queue in crypto_destroy_instance

In the Linux kernel, the following vulnerability has been resolved: crypto: api - Use work queue in cryptodestroyinstance The function cryptodropspawn expects to be called in process context. However, when an instance is unregistered while it still has active users, the last user may cause the...

The vulnerability of the XWiki Crypto API interface of the XWiki Platform, a platform for creating collaborative web applications, allows a perpetrator to execute arbitrary code.

The vulnerability of the XWiki Crypto API interface of the XWiki Platform, a platform for creating collaborative web applications, is related to the generation of X509 certificates, which are signed by default using SHA1. Exploiting this vulnerability could allow a malicious actor to execute...

The vulnerability of the programming interface of Windows CryptoAPI on Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Windows CryptoAPI programming interface on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux Kernel Crypto API Local Security Bypass Vulnerability (CNVD-2015-00753)

Linux is an open source computer operating system kernel. A local security bypass vulnerability exists in the Linux Kernel Crypto API, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

openSUSE Security Update : kernel (openSUSE-SU-2012:0206-1)

The openSUSE 11.3 kernel was updated to fix various bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used...

openSUSE Security Update : kernel (openSUSE-SU-2012:0236-1)

The openSUSE 11.4 kernel was updated to fix bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used. CVE-2011-269...

kernel: security and bugfix update. (important)

The openSUSE 11.4 kernel was updated to fix bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used. CVE-2011-269...