CVE-2026-31431

KEV High · CVSS 7.8

Linux kernel crypto algif_aead — kernel local privilege escalation / improper resource transfer (out-of-place vs in-place crypto buffer operation)

CVSS: 7.8; nvd
EPSS: 94.5%; 100th pct
KEV: Listed; 2026-05-01
Class: oss containerizable; CWE-669, CWE-1288

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Search profile — drives PoC discovery

Symbols algif_aeadalgif_aead.c72548b093ee319d43105a97b3115af9644c3893d22e013598b88d9934133961cfa271a91aead_recvmsgaead_sendmsgaead_sg_to_dstaead_request_set_cryptsock_aeadaead_ctxassociated dataAF_ALG

Keywords CVE-2026-31431algif_aeadLinux kernel cryptoout-of-place aeadin-place aead revert72548b093ee3CWE-669CWE-1288algif aead bufferAF_ALG AEAD exploitkernel crypto socket aead poc

Versions: Linux kernel versions prior to stable commits: 19d43105a97b, 3115af9644c3, 893d22e01359, 8b88d9934133, 961cfa271a91

Ranked PoCs (90) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

theori-io/copy-fail-CVE-2026-31431 candidate

known researcher · cited in references · recent activity

gh_search · Python

★ 4001
adysec/cve-2026-31431 candidate

known researcher · recent activity

gh_search · Rust

★ 41
qi4L/CVE-2026-31431-Container-Escape candidate

known researcher · recent activity

gh_search · Go

★ 20
sammwyy/copyfail-rs candidate

known researcher · recent activity

gh_search · Rust

★ 14
Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC candidate

containerized · recent activity

gh_search · C

★ 176
ZephrFish/CopyFail-CVE-2026-31431 candidate

known researcher · recent activity

gh_search · Python

★ 19
JuanBindez/CVE-2026-31431 candidate

known researcher · recent activity

gh_search · Python

★ 13
toxy4ny/copy-fail-exploit-on-c-redteam candidate

known researcher · recent activity

gh_search · C

★ 11
tgies/copy-fail-c needs review

recent activity

gh_search · C

★ 432
badsectorlabs/copyfail-go needs review

recent activity

gh_search · Assembly

★ 358
Crihexe/copy-fail-tiny-elf-CVE-2026-31431 needs review

recent activity

gh_search · Shell

★ 61
shadowabi/CVE-2026-31431-CopyFail-Universal-LPE needs review

recent activity

gh_search · Python

★ 58
iss4cf0ng/CVE-2026-31431-Linux-Copy-Fail needs review

recent activity

gh_search · Rust

★ 55
cozystack/copy-fail-blocker needs review

recent activity

gh_search · Makefile

★ 32
kadir/copy-fail-CVE-2026-31431-IOC needs review

recent activity

gh_search · Python

★ 31
jbnetwork-git/copy-fail-check needs review

recent activity

gh_search · Shell

★ 29
liamromanis101/CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script needs review

recent activity

gh_search · Shell

★ 25
KaraZajac/DIRTYFAIL needs review

recent activity

gh_search · C

★ 22
diemoeve/copyfail-rs needs review

recent activity

gh_search · Rust

★ 19
SeanRickerd/cve-2026-31431 needs review

recent activity

gh_search · Python

★ 12
ochebotar/copy-fail-CVE-2026-31431-detection-probe needs review

recent activity

nomi_sec

★ 10
4xura/CVE-2026-31431-Copy-Fail needs review

recent activity

nomi_sec

★ 6
Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail needs review

recent activity

nomi_sec

★ 3
bootsareme/copyfail-deconstructed needs review

recent activity

nomi_sec

★ 3
haydenjames/CVE-2026-31431-check needs review

recent activity

nomi_sec

★ 3
Iamliuxiaozhen/copy_fail needs review

recent activity

nomi_sec

★ 2
juliosuas/copyfail-guard needs review

recent activity

nomi_sec

★ 2
krisiasty/vcheck needs review

recent activity

nomi_sec

★ 2
waltrone1/copyfail-safe-check needs review

recent activity

nomi_sec

★ 2
Sebastian294/cve-2026-31431 needs review

recent activity

nomi_sec

★ 1
0xFuffM3/CVE-2026-31431-CopyFail needs review

recent activity

nomi_sec

★ 0
Helios973/CVE-2026-31431_exp.c needs review

recent activity

nomi_sec

★ 0
HulnotHutu/CVE-2026-31431 needs review

recent activity

nomi_sec

★ 0
John-Popovici/CVE-2026-31431-CopyFail-Linux-PrivEsc needs review

recent activity

nomi_sec

★ 0
Liverwortenuresis371/copyfail-rs needs review

recent activity

nomi_sec

★ 0
Yakovyakov/cve-2026-31431-mitigation needs review

recent activity

nomi_sec

★ 0
kinryulabs/rootpacket-cve-2026-31431 needs review

recent activity

nomi_sec

★ 0
kuniyal08/Copy-Fail-CVE-2026-31431-Lab needs review

recent activity

nomi_sec

★ 0
suominen/CVE-2026-31431 needs review

recent activity

nomi_sec

★ 0
t1ckprivate/CVE-2026-31431-Copy-Fail needs review

recent activity

nomi_sec

★ 0
tematemaru/CVE-2026-31431-simple-test needs review

recent activity

nomi_sec

★ 0
vishvacyber/Detection-Tool-Kit-for-CVE-2026-31431 needs review

recent activity

nomi_sec

★ 0
yangh-beep/CVE-2026-31431-C needs review

recent activity

nomi_sec

★ 0
zKaaanon/ProyectoFinalSO needs review

recent activity

nomi_sec

★ 0
rootsecdev/cve_2026_31431 needs review

recent activity

gh_search · Python

★ 562
Sndav/CVE-2026-31431-Advanced-Exploit needs review

recent activity

gh_search · Python

★ 110
painoob/Copy-Fail-Exploit-CVE-2026-31431 needs review

recent activity

gh_search · Python

★ 100
sgkdev/page_inject needs review

recent activity

gh_search · C

★ 74
0xShe/CVE-2026-31431 needs review

recent activity

gh_search · C

★ 38
wgnet/wg.copyfail.patch needs review

recent activity

gh_search · C

★ 25
sgkdev/ptrace_may_dream needs review

recent activity

gh_search · C

★ 19
Smarttfoxx/copyfail needs review

recent activity

gh_search · C

★ 18
xeloxa/copyfail-exploit needs review

recent activity

gh_search · Python

★ 16
philfry/cve-2026-31431-ftrace needs review

recent activity

gh_search · C

★ 12
infiniroot/ansible-mitigate-copyfail-dirtyfrag needs review

recent activity

nomi_sec

★ 6
samanzamani/copy-fail-checker needs review

recent activity

nomi_sec

★ 4
Koshmare-Blossom/Copyfail-sh needs review

recent activity

nomi_sec

★ 3
Pithase/asm-copyfail needs review

recent activity

nomi_sec

★ 3
Aurillium/RootRemover needs review

recent activity

nomi_sec

★ 2
adityasingh108/CVE-2026-31431-Metasploit-exploit needs review

recent activity

nomi_sec

★ 2
insomnisec/Detections-CVE-2026-31431 needs review

recent activity

nomi_sec

★ 2
1neptune/CopyFail needs review

recent activity

nomi_sec

★ 1
4n4s4zi/copyfail-alpine needs review

recent activity

nomi_sec

★ 1
Lutfifakee-Project/CVE-2026-31431 needs review

recent activity

nomi_sec

★ 1
gbonacini/CVE-2026-31431 needs review

recent activity

nomi_sec

★ 1
DroPZsec/SplicePrivillegeEscalationFIX needs review

recent activity

nomi_sec

★ 0
GubiczaP/cve-2026-31431-checker needs review

recent activity

nomi_sec

★ 0
Hunt-Benito/copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe needs review

recent activity

nomi_sec

★ 0
JimmyPughtron/CVE-2026-31431-Copy-Fail---Minified-LPE-PoC needs review

recent activity

nomi_sec

★ 0
K3ysTr0K3R/CVE-2026-31431-EXPLOIT needs review

recent activity

nomi_sec

★ 0
Maxime288/CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention needs review

recent activity

nomi_sec

★ 0
SilverRuler/copy-fail-CVE-2026-31431 needs review

recent activity

nomi_sec

★ 0
SugiB3o/CVE-2026-31431 needs review

recent activity

nomi_sec

★ 0
SystemVll/CVE-2026-31431-copyfail-aarch64 needs review

recent activity

nomi_sec

★ 0
adampielak/CVE-2026-31431_SCA_WAZUH needs review

recent activity

nomi_sec

★ 0
aexdyhaxor/CVE-2026-31431-copy-fail needs review

recent activity

nomi_sec

★ 0
cj667113/OCI-Ansible-Fix-CVE-2026-31431 needs review

recent activity

nomi_sec

★ 0
deckhouse/d8-copy-fail-mitigation needs review

recent activity

nomi_sec

★ 0
dotPY-hax/CopyFail needs review

recent activity

nomi_sec

★ 0
hyz-is/copyfail-fix needs review

recent activity

nomi_sec

★ 0
mauricioportela/CVE-2026-31431-Analysis needs review

recent activity

nomi_sec

★ 0
monobrau/copyfailscan needs review

recent activity

nomi_sec

★ 0
ridhinva/linux-kernel-algif-aead-checker needs review

recent activity

nomi_sec

★ 0
royayub/CVE-2026-31431 needs review

recent activity

nomi_sec

★ 0
ryan2929/CVE-2026-31431 needs review

recent activity

nomi_sec

★ 0
selectel/mks-copy-fail-mitigation needs review

recent activity

nomi_sec

★ 0
songzzzz/CVE-2026-31431 needs review

recent activity

nomi_sec

★ 0
vorkampfer/copyfail2_electric_boogaloo_fix needs review

recent activity

nomi_sec

★ 0
wh1sky02/copy-fail-python needs review

recent activity

nomi_sec

★ 0
zs1n/copy-fail-CVE-2026-31431 needs review

recent activity

nomi_sec

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

Affected packages

Linux	Kernel	4.14.0 → 5.10.254
Linux	Kernel	5.11.0 → 5.15.204
Linux	Kernel	5.16.0 → 6.1.170
Linux	Kernel	6.13.0 → 6.18.22
Linux	Kernel	6.19.0 → 6.19.12
Linux	Kernel	6.2.0 → 6.6.137
Linux	Kernel	6.7.0 → 6.12.85

References

Status: enriched · ingested 2026-06-30T06:00:22.000Z · profiled 2026-07-01T06:30:14.000Z