Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe | Kitploit
Tools/GitHubGitHub/hunt-benito/copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe
Privilege EscalationVulnerability AnalysisExploitationLearning & EducationBinary Exploitation
GitHubhunt-benito/copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe

copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe

View Repository

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
2 months agoNot yet reviewed

Copy Fail (CVE-2026-31431) - Vulnerability Checker

Conceptual validation script for CVE-2026-31431 "Copy Fail" — a Linux kernel local privilege escalation via algif_aead page-cache write.

Vulnerability

CVE-2026-31431 is a logic bug in the Linux kernel's authencesn AEAD template. When combined with AF_ALG and splice(), it allows an unprivileged local user to perform a controlled 4-byte write into the page cache of any readable file. A 732-byte Python script can obtain root on every major Linux distribution shipped since 2017.

Full Article

https://www.hunt-benito.com/blog/copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe/

Usage

This script checks vulnerability status only. It does NOT exploit the vulnerability.

root@kitploit:~
python3 cve_2026_31431_check.py

For the real PoC, see: https://github.com/theori-io/copy-fail-CVE-2026-31431

Requirements

  • Python 3.10+ (for os.splice)
  • Linux kernel with AF_ALG support
  • Unprivileged user account

Disclaimer

This tool is provided for educational and authorized security research purposes only. You may only run it on systems you own or have explicit written authorization to test. Unauthorized use is illegal and unethical. Hunt-Benito Limited accepts no liability for misuse.

Download Tool