copyfail-check

copyfail-check Shell scripts to detect Linux kernel vulnerabilities, check mitigation status, and guide remediation — designed to run locally or across fleets via SSH, Ansible, or pssh. CVE-2026-31431 — Copy Fail Copy Fail is a high-severity local privilege escalation LPE vulnerability in the Lin...

CVE-2026-31431

CopyFail2 CVE-2026-31431 - Python Implementation Python port of the CopyFail2 kernel exploit leveraging xfrm ESP-in-UDP MSGSPLICEPAGES no-COW fast path for unprivileged Linux local privilege escalation. Replaces a nologin/false entry in /etc/passwd with a passwordless uid-0 user and drops into a...

copy-fail-CVE-2026-31431-poc

CVE-2026-31431 — Copy Fail Proof of Concept This repository contains a Proof of Concept exploit for CVE-2026-31431 , a high-severity Linux kernel local privilege escalation vulnerability that allows any unprivileged local user to gain root access. The flaw, dubbed “Copy Fail”, resides in the...

linux-

linux- Modified version CVE-2022-0847 5.8 = Linux kernel 5.16.11 / 5.15.25 / 5.10.102...

CVE-2026-98611

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. The bpfcryptoctxcreate function attempts to read reserved fields from a parameter structure prior to verifying that the supplied buffer is sufficiently large. A local user capable of loading BPF programs can exploit this...

CVE-2026-98610

A flaw was found in the Linux kernel's Hierarchical Fair Service Curve HFSC network packet scheduler. A local user with network administration privileges, such as within a user namespace, can exploit this flaw to cause a Denial of Service DoS. Due to a lack of revalidation when traffic class leve...

cve-2026-31431-mitigation

CVE-2026-31431 Copy Fail – Technical Mitigation Tooling 1. Overview This package provides an automated solution to detect and mitigate the CVE-2026-31431 vulnerability aka Copy Fail on Linux systems running affected kernels versions 4.14 through 6.12.84, 6.13 through 6.18.21, etc.. The tooling...

cve-2026-31431-fleet-remediator

CVE-2026-31431 Fleet Audit and Remediation Tool 中文说明 This project is a fleet-scale orchestrator for auditing and remediating CVE-2026-31431 on Linux hosts in enterprise/internal networks. Batch SSH login to multiple hosts Risk evidence collection and status classification Temporary mitigation...

cve-2022-49186-research

CVE-2022-49186: Linux Kernel Privilege Escalation Research Overview Security research and proof-of-concept exploit for CVE-2022-49186, a Linux kernel vulnerability in the Visconti clock driver that enables local privilege escalation through array overflow. Vulnerability Details Type : Array...

Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.177 fixes various security issues: The following security issues were fixed: CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

DirtyFrag-Detector

🔍 Dirty Frag — CVE-2026-43284 / CVE-2026-43500 Detection Script TL;DR: There are two new Linux kernel bugs. This script tells you if you're vulnerable. Patch your stuff. What's this about? On May 7th 2026, a vulnerability class called Dirty Frag was publicly disclosed by security researcher Hyunw...

CVE-2026-31431

CVE-2026-31431 - Copy Fail Copy Fail is a logic bug in the Linux kernel's crypto subsystem CVE-2026-31431. A 2017 optimization in algifaead.c accidentally placed page cache pages into a writable scatterlist. The authencesn AEAD algorithm writes 4 scratch bytes past the output boundary during...

copyfail-mitigation

CVE-2026-31431 — Copy Fail Linux Kernelalgifaead Privilege Escalation / Memory Corruption Ansible-based audit and mitigation playbooks — ready to run in production Overview Copy Fail CVE-2026-31431 is a vulnerability in the Linux kernel's algifaead module — the userspace-facing AEAD interface of...

COPY-FAIL-Detection-with-Wazuh-4.14.4

COPY FAIL Detection with Wazuh 4.14.4 - CVE-2026-31431 Detection engineering for the Copy Fail kernel LPE · Ubuntu / RHEL / SUSE / Amazon Linux 2023 / Kali What is Copy Fail? CVE-2026-31431 is a logic bug in the Linux kernel's authencesn cryptographic template. It allows any unprivileged local us...

copyfail-CVE-2026-31431

copyfail-CVE-2026-31431 Extended version of the CVE-2026-31431 "Copy Fail" Linux Local Privilege Escalation PoC. Credits Original discovery & exploit: Theori / Xint — copy.fail Original repo: theori-io/copy-fail-CVE-2026-31431 Extended by: Trex1e What's different in this version Automatically...

copyfail

Overview Copy Fail CVE-2026-31431 is a logical vulnerability in the Linux kernel that allows a local unprivileged user to escalate privileges to superuser root. The vulnerability belongs to the Local Privilege Escalation LPE class, does not require complex exploitation conditions such as race...

copy-fail-CVE-2026-31431

CVE-2026-31431 — Copy Fail Linux kernel local privilege escalation via AFALG + splice page-cache overwrite For authorized security research, penetration testing, and educational purposes only. Do not use against systems you do not own or have explicit written permission to test. Technical Writeup...

CVE-2026-31431-Exploit

CVE-2026-31431 "Copy Fail" Exploit A professional proof-of-concept for the CVE-2026-31431 vulnerability, a critical flaw in the Linux kernel's algifaead / authencesn page-cache handling. Overview The CVE-2026-31431 vulnerability, colloquially known as "Copy Fail" , involves a page-cache...

Copy-Fail---CVE-2026-31431

Copy-Fail---CVE-2026-31431 CVE-2026-31431 "Copy Fail" - Analysis and defensive research for the Linux kernel AFALG privilege escalation vulnerability affecting all major distributions since 2017. 100% reliable LPE via authencesn logic flaw Files include a binary , that automates the whole process...

Estudo-de-Caso-CVE-2026-31431-CopyFail

🐧 CVE-2026-31431 — CopyFail: Linux Kernel Privilege Escalation Complete Case Study — How it was discovered, how it works, how to test, how to replicate in a safe environment and how to fix the critical vulnerability that affects almost all Linux distributions since 2017. 🚨 Legal Notice / Disclaim...