---
id: 165
title: "What we know about Copy Fail (CVE-2026-31431)"
cve: CVE-2026-31431
cvss: 7.8
severity: high
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/what-we-know-about-copy-fail-cve-2026-31431/"
published_at: "2026-04-29 22:26"
tags: ["active-exploitation", "ai-security", "zero-day", "public-poc", "container-security", "kernel-security", "privilege-escalation", "lpe", "exploitation", "linux-kernel", "exploit", "cve-2026-31431", "container-escape", "ai-discovery"]
phying_url: "https://phying.com/item/165"
lang: en
---

# What we know about Copy Fail (CVE-2026-31431)

## Summary

Copy Fail (CVE-2026-31431) is a Linux kernel LPE zero-day since 2017: an algif_aead logic flaw grants root and container escape; a public 732-byte exploit was found by AI in an hour.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **CVE:** CVE-2026-31431
- **CVSS:** 7.8
- **Published:** 2026-04-29 22:26
- **Original:** https://www.bugcrowd.com/blog/what-we-know-about-copy-fail-cve-2026-31431/
- **Phying News:** https://phying.com/item/165