wg.copyfail.patch

CVE-2026-31431 aka Copy.Fail eBPF workaround Why it matters This CVE allows authorized user change cache copy of any readable file, which leads to Local Privilege Escalation aka local root exploit, sandbox/container escape and other issues. It works by creating AFALG socket that is provided by...

CVE-2026-31431-mitigation

CVE-2026-31431-mitigation This repository holds the source code for our eBPF-based mitigation against CVE-2026-31431, also known as "copy.fail". More info available at https://copy.fail The motivation behind building this solution was to fulfill the need for a reboot-less mitigation for...

CVE-2022-23960

A new cache speculation vulnerability, known as Branch History Injection BHI or Spectre-BHB, was found in hw. Spectre-BHB is similar to Spectre v2, except that malicious code uses the shared branch history stored in the CPU Branch History Buffer, or BHB to influence mispredicted branches within t...