CVE-2026-31431检测和测试
0x01 Quick Start
Some target environments do not have Python installed, so this privilege escalation logic was rewritten in C.
Run the following command on your Linux machine or WSL (using -static is recommended to avoid GLIBC version issues):
gcc -static exploit.c -o exploit
2. Deploy and Execute
Upload the generated binary to the target machine:
chmod +x exploit
./exploit
If the exploit succeeds, the program will automatically execute su and spawn a root shell directly without requiring a password.
If you use python-ex.py version in some OS ,maybe you will met AttributeError: module 'os' has no attribute 'splice' error. so you can change to C lang version.
if you only check not exploit,you can run this command
python3 -c 'import socket; s=socket.socket(38,5,0); (s.bind(("aead", "authencesn(hmac(sha256),cbc(aes))")) or print("未缓解")) if s else None' 2>/dev/null || echo "已缓解"