← back | CVE Intelligence

CVE-2026-31431 [High] [Actively exploited]

Curated 2 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-31431.

CVSS: 7.8
Exploit Status: Actively exploited
Coverage Span: 2026-04-29 → 2026-05-01
Reports: 2 related reports

Associated Reports & Timeline

Copy Fail: Universal Linux Local Privilege Escalation Vulnerability

Copy Fail (CVE-2026-31431): an algif_aead flaw lets unprivileged users write 4 bytes into the page cache of any readable file via AF_ALG and splice(), escalating to root on kernels since 2017.

What we know about Copy Fail (CVE-2026-31431)

Copy Fail (CVE-2026-31431) is a Linux kernel LPE zero-day since 2017: an algif_aead logic flaw grants root and container escape; a public 732-byte exploit was found by AI in an hour.