PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What we know about Copy Fail (CVE-2026-31431)

bugcrowd.com | vulnerability | High | Actively exploited | CVE-2026-31431 | #active-exploitation | #ai-security | #zero-day | #public-poc | #container-security | #kernel-security | #privilege-escalation | #lpe | #exploitation | #linux-kernel | #exploit | #cve-2026-31431 | #container-escape | #ai-discovery
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Copy Fail (CVE-2026-31431) is a Linux kernel LPE zero-day since 2017: an algif_aead logic flaw grants root and container escape; a public 732-byte exploit was found by AI in an hour.
CVE
CVE-2026-31431
CVSS
7.8
Published
Collected

Related coverage

vulnerability · wiz.io
Copy Fail: Universal Linux Local Privilege Escalation Vulnerability
Copy Fail (CVE-2026-31431): an algif_aead flaw lets unprivileged users write 4 bytes into the page cache of any readable file via AF_ALG and splice(), escalating to root on kernels since 2017.
vulnerability · blog.quarkslab.com
MyReport Updater: From gRPC to SYSTEM
MyReport is a report generation software often used as a component of web-based applications. We describe a privilege escalation and remote code execution vulnerabilities in MyReport Updater 2.1.1 through its update configuration and gRPC service.
Critical · vulnerability · yeswehack.com
CVE-2026-48907: Unauthenticated RCE in the Joomla Content Editor extension
YesWeHack's analysis of CVE-2026-48907, a CVSS 10.0 unauthenticated RCE in the Joomla Content Editor: profile import abuse drops a PHP webshell; fixed in 2.9.99.5 with hardening in 2.9.99.6.
vulnerability · volexity.com
[CVE-2026-104935] A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days
# A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days October 13, 2026 Charlie Gardner, Sean Koessel, Steven Adair, and Volexity Volcano Team **_Volexity...
Critical · vulnerability · github.com
gVisor Sandbox Escape PoC: Host Root RCE via directfs openHandle Type Confusion
Demonstrates a complete, verified sandbox escape against gVisor container runtimes by chaining file system descriptor race conditions with host udev device probing to break container isolation completely.
High · vulnerability · github.com
GOG Galaxy Local Privilege Escalation (LPE) PoC via DLL Search-Order Hijacking
Demonstrates persistent DLL hijacking vulnerabilities in popular gaming clients, showing how insecure service configurations and missing safe DLL search controls allow standard users to breach SYSTEM privilege boundaries.
Back