CopyFail-Exploits-CVE-2026-31431

CVE-2026-31431 — Copy Fail Educational repository with multi-language implementations of the Copy Fail exploit. Created and maintained by @shotafry — because reading the CVE is not enough. You have to reproduce it. 📖 Leer en Español Table of Contents What is Copy Fail? Who discovered it? Severity...

RK35xx-CopyFail-Hotfix

RK35xx Kernel Patch: CVE-2026-31431 "Copy Fail" RK35xx CopyFail Hotfix: CVE-2026-31431 Patch for Joshua Riek's Ubuntu 24.04 A community-provided, pre-compiled kernel patch for all RK35xx single-board computers Rock 5, Orange Pi 5, NanoPC, etc. running Joshua Riek's Ubuntu 24.04 Kernel...

CVE-2026-41651-analysis

CVE-2026-41651 — Pack2TheRoot Analysis PackageKit Local Privilege Escalation TOCTOU Race Condition CVSS v3.1: 8.8 HIGH | CWE-367 | Published: 2026-04-22 📌 Overview This repository compiles a personal analysis report and research material on the PackageKit local privilege escalation vulnerability...

CVE-2026-31431

CVE-2026-31431 — Copy Fail 中文版 732 Bytes to Root on Every Major Linux Distribution CVE-2026-31431 Copy Fail is a logic bug in the Linux kernel's authencesn cryptographic template. It allows an unprivileged local user to trigger a deterministic, controlled 4-byte write into the page cache of any...

CVE-2026-31431-PocC

CVE-2026-31431-PoC CVE-2026-31431 PoC reproduced in C, usable for exploitation when Python is not available on the target environment. Vulnerability Basic Information Vulnerability type: Linux kernel AFALG subsystem page cache poisoning, achieving local privilege escalation and possible container...

CVE-2026-31431

CVE-2026-31431 Proof of Concept PoC This repository contains a Proof of Concept PoC exploit for CVE-2026-31431 , demonstrating a local privilege escalation vulnerability. !WARNING This project is intended strictly for educational and security research purposes only. Use it only on systems you own...

EUVD-2026-95242

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cpwrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files...

CVE-2026-84245

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component due to improper privilege management (CWE-269). A low-privileged local user can exploit this flaw to gain root privileges , allowing for the unauthorized access or modification of sensitive...

CVE-2024-44346

Divulgación de CVE: CVE-2024-44346 Fecha: 13-09-2024 Resumen Se identificó una vulnerabilidad en Tosibox tbsetup.exe versión 4.0.0.0, que podría permitir una escalada de privilegios local. A este problema se le ha asignado el identificador CVE-2024-44346. El proveedor ha publicado un aviso con má...

CVE-2026-31431-exploit

CVE-2026-31431 WARNING These Linux LPE exploit implementations are runtime-destructive. They overwrite the live page-cache view of privileged targets such as: su PAM configuration files any file passed into patch mode This is usually not a normal persistent on-disk edit, but it does change runtim...

CVE-2026-31431-CopyFail-Universal-LPE

CVE-2026-31431 "Copy Fail" — Universal LPE Exploit Linux kernel page cache 4-byte arbitrary write → Local Privilege Escalation Multiple exploit approaches: dynamic ELF entry point overwrite, full binary replacement, Python 3.x compatible with ctypes splice fallback. What is this? CVE-2026-31431 i...

CVE-2026-1880

CVE-2026-1880 https://github.com/user-attachments/assets/2602558f-abd8-4773-9094-64c32501dfed ASUS DriverHub Update TOCTOU LPE ASUS DriverHub Driver Update Process TOCTOU Vulnerability Leading to LPE Technical Resources Technical Presentation PDF 한국어.md | English.md Asus Hall of Fame Afterword...

CVE-2021-4034-POC

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

copyfail-rs

copyfail-rs Copy Fail exploit CVE-2026-31431 but in Rust, a critical vulnerability chaining AFALG and splice to achieve a 4-byte page cache write, leading to local privilege escalation on major Linux distributions. Based on the research and PoC by Xint Code. Disclaimer !CAUTION This project is fo...

CVE-2026-43284-

CVE-2026-43284 Dirty Flag Local Privilege Escalation As of early May 2026, Dirty Frag refers to a high-severity Linux kernel vulnerability CVE-2026-43284 and CVE-2026-43500.Impact: It allows unprivileged users to gain root access full administrative control by exploiting how the kernel handles...

CVE-2026-31431

CVE-2026-31431 - Copy Fail Copy Fail is a logic bug in the Linux kernel's crypto subsystem CVE-2026-31431. A 2017 optimization in algifaead.c accidentally placed page cache pages into a writable scatterlist. The authencesn AEAD algorithm writes 4 scratch bytes past the output boundary during...

CVE-2021-4034

CVE-2021-4034 - Docker Container Deliberately Vulnerable Version Docker PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

CVE-2025-32463

CVE-2025-32463: Sudo Local Privilege Escalation Vulnerability Summary CVE-2025-32463 is a Local Privilege Escalation LPE vulnerability discovered in Sudo. An attacker can exploit this vulnerability to gain root privileges under certain conditions. Vulnerability Details Vulnerability Description: ...

copy-fail-CVE-2026-31431

CVE-2026-31431 — Copy Fail 732 byte. Qualsiasi distro. Root. Un difetto logico lineare nel template crittografico authencesn del kernel Linux consente a un utente locale non privilegiato di eseguire una scrittura precisa e controllata di 4 byte nella page cache di qualsiasi file leggibile — inclu...

CVE-2025-32463

CVE-2025-32463 — Sudo 1.9.14 → 1.9.17 Local Privilege Escalation via chroot Exploit script demonstrating a local privilege escalation affecting certain Sudo 1.9.x releases CVE-2025-32463. Exploit reference: https://www.exploit-db.com/exploits/52352 Tested on: Ubuntu 24.04.2 LTS with sudo 1.9.16p2...