CVE-2026-31431

CVE-2026-31431检测和测试

0x01 Quick Start

Some target environments do not have Python installed, so this privilege escalation logic was rewritten in C.

1. Compile

Run the following command on your Linux machine or WSL (using -static is recommended to avoid GLIBC version issues):

gcc -static exploit.c -o exploit

2. Deploy and Execute

Upload the generated binary to the target machine:

chmod +x exploit
./exploit

If the exploit succeeds, the program will automatically execute su and spawn a root shell directly without requiring a password.

If you use python-ex.py version in some OS ,maybe you will met AttributeError: module 'os' has no attribute 'splice' error. so you can change to C lang version.

if you only check not exploit,you can run this command

python3 -c 'import socket; s=socket.socket(38,5,0); (s.bind(("aead", "authencesn(hmac(sha256),cbc(aes))")) or print("未缓解")) if s else None' 2>/dev/null || echo "已缓解"