Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-31431-Copy-Fail — Local privilege escalation exploit for CVE-2026-31431 in the Linux kernel crypto subsystem, providing root access and container breakout with a minimal Python script. | Kitploit
Tools/GitHubGitHub/recofu/cve-2026-31431-copy-fail
Privilege EscalationExploit FrameworksVulnerability AnalysisExploitationMalware AnalysisContainer Escape
GitHubrecofu/cve-2026-31431-copy-fail

CVE-2026-31431-Copy-Fail

Local privilege escalation exploit for CVE-2026-31431 in the Linux kernel crypto subsystem, providing root access and container breakout with a minimal Python script.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
355 months agoNot yet reviewed

CVE-2026-31431 — Copy Fail

Severity: Critical
CVSS v3.1: 9.8 (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Status: Public Exploit Available

Summary

CVE-2026-31431 ("Copy Fail") is a local privilege escalation vulnerability in the Linux kernel cryptographic subsystem.

Any unprivileged user can escalate to root within seconds using a minimal Python script (~732 bytes), affecting most Linux systems compiled after 2017.

Impact

  • Full system compromise (root access)
  • Cross-container / cross-tenant breakout
  • No disk artifacts (memory-resident execution)
  • Difficult to detect using FIM/SIEM

Affected Systems

  • Linux kernel builds including CONFIG_CRYPTO_USER_API_AEAD
  • Most distributions compiled after 2017

Mitigation

👉 See: docs/mitigation.md

Technical Details

👉 See: docs/technical-analysis.md

Detection

👉 See: ioc/detection-rules.md

References

  • copy.fail
  • Sysdig TRT
  • Bugcrowd
  • CloudLinux Security Blog

Disclaimer

Do not run exploit code in production systems.

Download Tool