CVE-2026-31431-Copy-Fail

CVE-2026-31431 — "Copy Fail": Linux 커널 algifaead 로컬 권한 상승 CISA KEV | CVSS 7.8 HIGH | Linux 커널 4.14 2026년 초반 영향 9년 목차 1. 요약 2. 위험 평가 3. 기술 심층 분석 4. 공격 방법론 — 레드 팀 5. 탐지 및 사고 대응 — 블루 팀 6. 패치 및 수정 7. 랩 환경 8. 참고 자료 1. 요약 CVE-2026-31431 은 "Copy Fail"이라는 별칭으로 불리는, Linux 커널의 암호화 하위 시스템에서 발생하는 높은 심각도의 로컬...

CVE-2026-97588

A flaw was found in the Linux kernel's s390 cryptographic subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by executing cryptographic operations when underlying hardware repeatedly reports a busy state. Because the subsystem fails to properly translate persistent...

The vulnerability of the x509_process_extension() function in the crypto/asymmetric_keys/x509_cert_parser.c module of the Linux kernel’s cryptographic subsystem allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the x509processextension function in the crypto/asymmetrickeys/x509certparser.c module of the Linux kernel’s cryptographic subsystem is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

USN-8620-1: Linux kernel vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

USN-8200-3 linux-raspi, linux-raspi-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - GPU drivers; - I2C subsystem; - Network traffic control; CVE-2022-49046,...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 — "Copy Fail": Linux Kernel algifaead Local...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 — "Copy Fail": Linux Kernel algifaead Local...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 — "Copy Fail": Linux Kernel algifaead Local...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

🔴 CVE-2026-31431 — "Copy Fail" A 9-Year-Old Linux Kernel...

Exploit for CVE-2026-31431

CVE-2026-31431 — Copy Fail Severity: Critical CVSS v3...

Vulnerability avoidance in the Linux kernel cryptographic subsystem

The Linux kernel has a vulnerability in the algifaead crypto module of the cryptographic subsystem. This vulnerability resides in the algifaead crypto module of the Linux kernel, where a mistake occurred during the in-place operation when the source and destination mappings differed. This allows ...

USN-8159-3: Linux kernel (Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - Netfilter; - Network traffic control; CVE-2025-37849, CVE-2026-23060,...

The vulnerability of the af_alg_alloc_areq() function in the crypto/af_alg.c module of the Linux kernel’s cryptographic subsystem allows a hacker to trigger a service failure.

The vulnerability of the afalgallocareq function in the crypto/afalg.c module of the Linux kernel’s cryptographic subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the seqiv_aead_encrypt_complete2() function in the crypto/seqiv.c module of the Linux kernel’s cryptographic subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the seqivaeadencryptcomplete2 function in the crypto/seqiv.c module of the Linux kernel cryptographic subsystem is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

USN-7990-2 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Padata parallel execution mechanism; - Netfilter; CVE-2022-49698, CVE-2025-21726, CVE-2025-400...

EUVD-2023-60107

In the Linux kernel, the following vulnerability has been resolved: crypto: api - Use work queue in cryptodestroyinstance The function cryptodropspawn expects to be called in process context. However, when an instance is unregistered while it still has active users, the last user may cause the...

The vulnerability of the alg_type_list{} structure in the crypto/af_alg.c module of the Linux kernel’s cryptographic subsystem allows a hacker to induce a service failure.

The vulnerability of the algtypelist structure in the crypto/afalg.c module of the Linux kernel’s cryptography subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

EUVD-2025-32398

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Always pass in an error pointer to sevplatformshutdownlocked When 9770b428b1a2 "crypto: ccp - Move devinfo/err messages for SEV/SNP init and shutdown" moved the error messages dumping so that they don't need to be...

CVE-2024-53162

In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat4xxx - fix off by one in uofgetname The fwobjs array has "numobjs" elements so the needs to be = to prevent an out of bounds read. Mitigation To mitigate this issue, prevent module qat4xxx from being loaded. Please...