xerxes-2/cve-2026-31431-rsRust-based proof-of-concept for CVE-2026-31431, exploiting AF_ALG and splice to overwrite /bin/su and spawn a root shell. Self-contained no_std binaries for x86_64 and aarch64.
src/
├── main.rs # Exploit: AF_ALG + splice to overwrite /bin/su
└── bin/
└── payload.rs # Payload
Self-contained no_std binaries with zero runtime dependencies:
poc-rs: 4.1 KB (payload embedded via include_bytes!)payload: 1.7 KBRequires Rust 1.85+:
cargo build --release --bin payload
cargo build --release
./target/x86_64-unknown-none/release/poc-rs
./target/aarch64-unknown-none/release/poc-rs
On success, executes the overwritten /bin/su
which spawns a root shell and executes id.
[!CAUTION] For authorized security research and testing only.