Copy-Fail---CVE-2026-31431

CVE-2026-31431 - Copy Fail - Detection Script Python script to check whether a Linux system is vulnerable to the CVE-2026-31431 Copy Fail flaw, a local privilege escalation in the Linux kernel. The flaw in brief Since 2017 commit 72548b093ee3, the kernel's algifaead cryptographic module has handl...

GhostShell

GhostShell CVE-2026-31431 — Local Privilege Escalation via Linux Kernel Page Cache Corruption GhostShell is a local privilege escalation tool that exploits a flaw in the Linux kernel's authencesn AEAD crypto implementation to obtain a root shell from an unprivileged user account. It corrupts the...

Copy-fail-CVE-2026-31431-Exploit-in-C

Copy-fail-CVE-2026-31431-Exploit-in-C Discovery and original disclosure of CVE-2026-31431: Theori / Xint. Public writeup: https://copy.fail/. Overview This program targets the Linux kernel’s AFALG AEAD path and attempts to trigger the “Copy Fail” page-cache corruption behavior described in public...

CVE-2026-31431-Copy-Fail

CVE-2026-31431-Copy-Fail Explotado por infrar3d Este repositorio contiene un exploit de prueba de concepto para CVE-2026-31431 Copy Fail. CVE-2026-31431, conocido como "Copy Fail", es una vulnerabilidad de Escalada Local de Privilegios LPE de alta gravedad en el kernel de Linux que ha estado...

autorootlinux

autorootlinux Un script de Linux para obtener privilegios de root basado en CVE-2026-31431 Este script es solo para fines educativos; úsalo en un entorno de pruebas las operaciones del kernel conllevan riesgos Método de uso: root@kitploit: chmod +x main.sh ./main.sh...

CVE-2026-31431

CVE-2026-31431 — Copy Fail 中文版 732 Bytes para Root en Todas las Principales Distribuciones de Linux CVE-2026-31431 Copy Fail es un error lógico en la plantilla criptográfica authencesn del kernel de Linux. Permite que un usuario local sin privilegios active una escritura determinista y controlada...

cve-2026-31431-check

cve-2026-31431-check cve-2026-31431-check is a small Bash triage script for checking local Linux exposure and mitigation indicators for CVE-2026-31431, also known as "Copy Fail." The script targets Debian, Ubuntu, and Debian-family derivatives including Linux Mint, Pop!OS, and similar...

cve_2026_31431_audit

CVE-2026-31431 Audit This project provides a professional Python script designed to check if a system is vulnerable to CVE-2026-31431 and demonstrates how to exploit it for research purposes. 🎬 Full Workflow The diagram below illustrates the complete workflow from Environment Audit SCAN, Patch...

CVE-2026-31431-PocC

CVE-2026-31431-PoC CVE-2026-31431 PoC reproduced in C, usable for exploitation when Python is not available on the target environment. Vulnerability Basic Information Vulnerability type: Linux kernel AFALG subsystem page cache poisoning, achieving local privilege escalation and possible container...

CVE-2026-31431-RCE-Exploit

🔴 CVE-2026-31431 — "Copy Fail" A 9-Year-Old Linux Kernel Logic Bug That Grants Root in Seconds Overview Copy Fail is a high-severity local privilege escalation LPE vulnerability in the Linux kernel's cryptographic subsystem algifaead. Discovered and disclosed by Theori via their Xint Code...

CVE-2026-31431

CVE-2026-31431 CopyFail standard binary Get all new CVE alert on https://exploitroom.com root@kitploit: mail :: /Desktop/CVE-2026 » file exploit: ELF 64-bit LSB executable, x86-64, version 1 GNU/Linux, statically linked, BuildIDsha1=9454dbdde0ac2d1a8981c06db89f24a4753ec3b7, for GNU/Linux 3.2.0, n...

Linux-copy-fail-CVE-2026-31431

CVE-2026-31431 — Copy Fail Linux Privilege Escalation Overview This repository presents a technical overview and demonstration of CVE-2026-31431 , commonly referred to as Copy Fail , a Linux kernel vulnerability that enables local privilege escalation. The vulnerability affects a wide range of...

CopyFail-for-dummies

Copy Fail / CVE-2026-31431 — Notas de investigación Resumen Este repositorio contiene un diagrama técnico depurado y notas de apoyo sobre la vulnerabilidad del kernel de Linux conocida comúnmente como Copy Fail y registrada como CVE-2026-31431. El propósito de este material es: explicar el...

CVE-2026-31431

📌 CVE-2026-31431 – Privilege Escalation via AEAD Crypto Socket Misuse 🧠 Overview CVE-2026-31431 is a Linux privilege escalation vulnerability that abuses the AFALG kernel crypto API interface. By crafting a malicious interaction with AEAD Authenticated Encryption with Associated Data sockets, an...

yc-mk8s-copy-fail-mitigation

Mitigación de Copy Fail / Dirty Frag para Yandex Managed Kubernetes Aplicación automática de la mitigación para las vulnerabilidades CVE-2026-31431, CVE-2026-43284 y CVE-2026-43500 en el kernel de Linux en todos los worker-nodes del clúster Yandex Managed Kubernetes. Descripción de la...

copy-fail-go

copy-fail-go Puerto en Go del PoC en Python de grenkoca para CVE-2026-31431 copy-fail. Esta versión compila a un binario completamente estático con cero dependencias en tiempo de ejecución: sin Python, sin pip, sin restricciones de versión de libc. Colócalo en cualquier objetivo Linux y ejecútalo...

CVE-2026-31431

CVE-2026-31431 CVE-2026-31431 detection and testing 0x01 Quick Start Some target environments do not have Python installed, so this privilege escalation logic was rewritten in C. 1. Compile Run the following command on your Linux machine or WSL using -static is recommended to avoid GLIBC version...

copy-fail

Copy Fail PoC Prueba de concepto para CVE=2026-31431 Estos scripts elevan a cualquier usuario normal a root. Funciona en la mayoría de las distribuciones de Linux y CPUs. Artículo técnico en https://copy.fail...

CVE-2026-31431

CVE-2026-31431 - Prueba de Concepto Exploit de escritura en page-cache de Linux algifaead a root - Escalada de Privilegios Local Writeup https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170 Notas Aún no hemos probado completamente el PoC, se bas...

copy-fail-CVE-2026-31431

Vulnerability Description Root Cause In 2017, the Linux kernel crypto module authencesn introduced an in-place optimization for AEAD Authenticated Encryption with Associated Data operations. This optimization caused read-only pages in the page cache to be incorrectly placed into a writable...