---
id: 6850
title: "[CVE-2026-31431] Copy Fail: Universal Linux Local Privilege Escalation Vulnerability"
cve: CVE-2026-31431
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/copyfail-cve-2026-31431-linux-privilege-escalation-vulnerability"
published_at: "2026-05-01T12:38:09Z"
tags: ["privilege-escalation", "linux-kernel", "vulnerability", "cve-2026-31431", "container-escape", "copy-fail"]
phying_url: "https://phying.com/item/6850"
lang: en
---

# [CVE-2026-31431] Copy Fail: Universal Linux Local Privilege Escalation Vulnerability

## Summary

Copy Fail (CVE-2026-31431): an algif_aead flaw lets unprivileged users write 4 bytes into the page cache of any readable file via AF_ALG and splice(), escalating to root on kernels since 2017.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2026-31431
- **Published:** 2026-05-01T12:38:09Z
- **Original:** https://www.wiz.io/blog/copyfail-cve-2026-31431-linux-privilege-escalation-vulnerability
- **Phying News:** https://phying.com/item/6850