copy-fail-CVE-2026-31431

Schwachstellenbeschreibung Ursache der Schwachstelle Das Linux-Kernel-Kryptografiemodul authesnc führte 2017 eine Optimierung für In-Place-Operationen AEAD – Authenticated Encryption with Associated Data ein. Diese Optimierung führte dazu, dass unter bestimmten Bedingungen schreibgeschützte Seite...

CVE-2026-31431

CVE-2026-31431 LPE PoC Implementazione in Rust Questo progetto è una Proof of Concept PoC implementata in Rust per una vulnerabilità di escalation dei privilegi locale LPE che simula CVE-2026-31431. Dimostra come manipolare la cache delle pagine del kernel Linux sfruttando la Crypto API.cite: 1, ...

copy-fail_LPE_Interactive

CVE-2026-31431 Copy Fail Exploit Strumento di sfruttamento della vulnerabilità di contaminazione della page cache del kernel Linux, con supporto per l'esecuzione di comandi non interattivi. Panoramica della vulnerabilità CVE-2026-31431 è una vulnerabilità di difetto logico nel kernel Linux,...

copyfail-rs

copyfail-rs Implementazione in Rust di CVE-2026-31431 Copy Fail — una primitiva di scrittura nella page cache del kernel Linux tramite AFALG splice. 中文文档 / Chinese README CVE-2026-31431 L'implementazione algifaead del kernel Linux consente a un utente non privilegiato di scrivere dati arbitrari...

CVE-2026-74631

A flaw was found in the Linux kernel's smcrxsplice function within the net: smc component. This vulnerability arises from an imbalance in the lifetime management of splice entries, where page references are not properly handled before being passed to splicetopipe. This can lead to a reference cou...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: ipv4, ipv6: Fixed the handling of transhdrlen in ip,6appenddata. Including transhdrlen in the packet length is a problem when the packet is partially filled e.g., a sendMSGMORE operation occurred previously when appending to a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: nfsd: Do not replace a page in the rqpages array if it is a continuation of the last page. The splice read function calls nfsdspliceactor to place the pages containing file data into the svcrqst-rqpages array. However, it is...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: tls: Fixed a NULL dereference issue in tlsswspliceeof, where an empty plaintext/ciphertext buffer could cause confusion in the sendfile process. When the plaintext/ciphertext skmsg is empty, the send path becomes confused because...

CVE-2026-74631

In the Linux kernel, the following vulnerability has been resolved: net: smc: fix splice entry lifetime imbalance in smcrxsplice smcrxsplice passes pages to splicetopipe before taking the references that cover the lifetime of each splice entry. In the VM-backed RMB path, splicetopipe may drop...

UBUNTU-CVE-2026-74610

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext skmsg ring unpushed When the copy path in tlsswsendmsglocked adds the fragment that fills the plaintext skmsg ring, it does not set fullrecord, so the record is left full and unpushed. A later...

UBUNTU-CVE-2026-74631

In the Linux kernel, the following vulnerability has been resolved: net: smc: fix splice entry lifetime imbalance in smcrxsplice smcrxsplice passes pages to splicetopipe before taking the references that cover the lifetime of each splice entry. In the VM-backed RMB path, splicetopipe may drop...

CVE-2026-74631

In the Linux kernel, the following vulnerability has been resolved: net: smc: fix splice entry lifetime imbalance in smcrxsplice smcrxsplice passes pages to splicetopipe before taking the references that cover the lifetime of each splice entry. In the VM-backed RMB path, splicetopipe may drop...

EUVD-2026-64568

In the Linux kernel, the following vulnerability has been resolved: net: smc: fix splice entry lifetime imbalance in smcrxsplice smcrxsplice passes pages to splicetopipe before taking the references that cover the lifetime of each splice entry. In the VM-backed RMB path, splicetopipe may drop...

CVE-2026-74631

CVE-2026-74631 affects the Linux kernel net: smc subsystem, specifically the smc_rx_splice() function. The root cause is a splice entry lifetime imbalance : pages are passed to splice_to_pipe() before the references covering each entry's lifetime are taken. In the VM-backed RMB path, unqueued ent...

CVE-2026-74631 net: smc: fix splice entry lifetime imbalance in smc_rx_splice

In the Linux kernel, the following vulnerability has been resolved: net: smc: fix splice entry lifetime imbalance in smcrxsplice smcrxsplice passes pages to splicetopipe before taking the references that cover the lifetime of each splice entry. In the VM-backed RMB path, splicetopipe may drop...

Linux Distros Unpatched Vulnerability : CVE-2026-74631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: smc: fix splice entry lifetime imbalance in smcrxsplice smcrxsplice passes pages to splicetopipe before taking the references that cover the lifetime of ea...

PT-2026-79636

In the Linux kernel, the following vulnerability has been resolved: net: smc: fix splice entry lifetime imbalance in smc rx splice smc rx splice passes pages to splice to pipe before taking the references that cover the lifetime of each splice entry. In the VM-backed RMB path, splice to pipe may...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100173)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100173 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebtsnat ARP rewrite writable The ebtables SNAT target keeps the Ethernet...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

🚀 CVE-2026-31431 – Advanced Linux Kernel Exploit "From...

CVE-2026-64026

A flaw was found in the Linux kernel's rxrpc component. This vulnerability can lead to pagecache corruption when data packets are decrypted in-place after being transmitted locally via the splice system call. This issue stems from improper handling of packet sharing within the I/O thread,...