morton-li/copy-fail-cve-2026-31431Proof-of-concept exploit for CVE-2026-31431, a Linux kernel privilege escalation, with x86_64, AArch64, and C payloads to obtain root on affected distributions.
Copy Fail（CVE-2026-31431）PoC 与 payload 示例。
| Distro | Kernel Version |
|---|---|
| Ubuntu 24.04 LTS | 6.17.0-1007-aws |
| Amazon Linux 2023 | 6.18.8-9.213.amzn2023 |
| RHEL 10.1 | 6.12.0-124.45.1.el10_1 |
| SUSE 16 | 6.12.0-160000.9-default |
在受影响的 Linux 发行版本上执行 copy_fail_exp.py 以获得 root 权限。
以下步骤用于在本地重新生成 payload 文件，便于调试与验证。
payloads/x86_64.asm）安装依赖：
apt install -y nasm
编译：
nasm -f bin x86_64.asm -o payload.bin
检查产物：
wc -c payload.bin
xxd payload.bin
payloads/aarch64.s）安装依赖：
apt install -y binutils-aarch64-linux-gnu gcc-aarch64-linux-gnu
编译：
aarch64-linux-gnu-as aarch64.s -o aarch64.o
aarch64-linux-gnu-objcopy -O binary -j .text aarch64.o aarch64.bin
检查产物：
wc -c payload.bin
file payload.bin
xxd payload.bin
payloads/payload.c）编译：
gcc -Os -s payload.c -o payload.bin
检查产物：
wc -c payload.bin
file payload.bin