CVE-2026-31431-CopyFail-Linux-PrivEsc

CVE-2026-31431 CopyFail Linux 本地权限提升 本仓库演示并解释了 CVE-2026-31431，即 Linux 内核复制失败本地权限提升漏洞。该漏洞允许以读取权限打开的文件在页缓存中被覆盖数据。 此仓库仅用于教育目的，并在受控环境中展示该漏洞。 包含的文件如下： root@kitploit: ├── exploit │ ├── copyfail.py 自定义漏洞利用程序，可针对任何具有读取权限的文件 │ ├── originalpayload.txt 原始漏洞利用程序使用的 payload 副本 │ ├── copyfailoriginal.py...

CopyFail-CVE-2026-31431

CopyFail: CVE-2026-31431 copy.fail 的 Python 实现。通过 AFALG + splice 覆盖 setuid-root 二进制的页面缓存以获取 root 权限。无需竞争条件，无需偏移量，自 2017 年起适用于任何 Linux 发行版。 要求 Python 3.6+（3.12+ 原生使用 os.splice；旧版本回退到 ctypes） Linux 内核需支持 authencesnhmacsha256,cbcaes，若缺失：modprobe authencesn hmac cbc 支持的架构 x8664 i386/i686 armv6l/armv7...

CVE-2026-53365

CVE-2026-53365 — VsockDrop: underflow del reference count zero-copy di iouring + AFVSOCK, escalation di privilegi tramite riscrittura della Page-Cache Mirror di distribuzione HackSpeak. Questo repository è un mirror di distribuzione di MaherAzzouzi/vsockdrop , il codice è identico a quello...

CVE-2026-31431-Metasploit-exploit

CVE-2026-31431 - Kernel Linux AFALG "Copy Fail" Escalation Locale dei Privilegi Un modulo Metasploit Post-Exploitation automatizzato che sfrutta CVE-2026-31431 noto anche come "Copy Fail" per eseguire un'Escalation Locale dei Privilegi LPE su kernel Linux vulnerabili versioni da 4.14 a 6.19.12...

Dirty-Frag-CVE-2026-43284

Dirty-Frag-CVE-2026-43284 Dirty Frag CVE‑2026‑43284 & CVE‑2026‑43500 — Laboratorio di Riproduzione e Rilevamento dell'Exploit Questo repository documenta la riproduzione end‑to‑end, l'ingegneria del rilevamento e la risposta agli incidenti per la catena di escalation dei privilegi locali LPE Dirt...

CVE-2026-43494-PinTheft-PoC

SLEY — PoC PinTheft CVE-2026-43494 Prova di concetto — uid=1000raken → uid=0root dopo ./sley su WSL2 6.6.87.2-microsoft-standard-WSL2 Prova di concetto in un singolo file per CVE-2026-43494 PinTheft: un'escalation dei privilegi locale del kernel Linux che combina un bug di conteggio dei riferimen...

kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel

A flaw was found in the Linux kernel's XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged...

FreeBSD Security Advisory - FreeBSD-SA-26:26.ktls

FreeBSD Security Advisory - The KTLS receive path decrypted each record in place, assuming that the mbufs holding received data were anonymous and safe to modify. This assumption does not hold for data placed on a socket by sendfile2, which can reference file-backed memory directly through...

Important: kernel-livepatch-6.18.25-52.107

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-6.18.25-52.107 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

Important: kernel-livepatch-6.12.83-113.160

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-6.12.83-113.160 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

Important: kernel-livepatch-6.12.83-111.159

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-6.12.83-111.159 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

Important: kernel-livepatch-6.1.170-210.320

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-6.1.170-210.320 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

Important: kernel-livepatch-5.10.253-252.1016

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-5.10.253-252.1016 Issue Correction: Please ensure you have live patching enabled. Run yum update...

Important: kernel-livepatch-6.12.79-101.147

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-6.12.79-101.147 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

Important: kernel-livepatch-6.18.8-9.213

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-6.18.8-9.213 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

Important: kernel-livepatch-5.10.252-250.1005

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-5.10.252-250.1005 Issue Correction: Please ensure you have live patching enabled. Run yum update...

Important: kernel-livepatch-6.1.168-202.320

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-6.1.168-202.320 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

Important: kernel-livepatch-6.12.73-95.123

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-6.12.73-95.123 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

Important: kernel-livepatch-6.12.80-105.147

Issue Overview: PinTheft is a Linux local privilege escalation exploit for an RDS zerocopy double-free that can be turned into a page-cache overwrite through iouring fixed buffers. Affected Packages: kernel-livepatch-6.12.80-105.147 Issue Correction: Please ensure you have live patching enabled...

Important: kernel-livepatch-6.18.20-20.229

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-6.18.20-20.229 Issue Correction: Please ensure you have live patching enabled. Run dnf update...