crypto: algif_aead - Revert to operating out-of-place
100Vexday Risk Score
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
ssvc Actcvss 7.8epss 100%
from disclosure to weapon0 days
Published on NVDApr 22
1st PoCMar 8
metasploit+7d
CISA KEV+9d
exploitation probability
100%top 1% of all CVEs
observed exploitation
yesCISA + VulnCheck
276 public exploit(s)
Action required by CISAfederal deadline: 2026-05-15
"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Versions
Affected
Linux/Kernel >= 4.14.0 < 5.10.254; Linux/Kernel >= 5.11.0 < 5.15.204; Linux/Kernel >= 5.16.0 < 6.1.170; Linux/Kernel >= 6.2.0 < 6.6.137; Linux/Kernel >= 6.7.0 < 6.12.85; Linux/Kernel >= 6.13.0 < 6.18.22
Fixed in
Linux/Kernel 5.10.254; Linux/Kernel 5.15.204; Linux/Kernel 6.1.170; Linux/Kernel 6.6.137; Linux/Kernel 6.12.85; Linux/Kernel 6.18.22
Researched and written with AI from the vendor advisory and public analysis, with the sources above. Always confirm the fixed version in the official advisory before acting.
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Linux · Linuxpublic PoCs found — 276
githubgithub.com/tgies/copy-fail-c★ 434githubgithub.com/cozystack/copy-fail-blocker★ 31githubgithub.com/KaraZajac/DIRTYFAIL★ 23githubgithub.com/Smarttfoxx/copyfail★ 20githubgithub.com/sgkdev/ptrace_may_dream★ 20githubgithub.com/JuanBindez/CVE-2026-31431★ 14githubgithub.com/philfry/cve-2026-31431-ftrace★ 12githubgithub.com/ochebotar/copy-fail-CVE-2026-31431-detection-probe★ 10githubgithub.com/yandex-cloud-examples/yc-mk8s-copy-fail-mitigation★ 10githubgithub.com/4xura/CVE-2026-31431-Copy-Fail★ 6githubgithub.com/infiniroot/ansible-mitigate-copyfail-dirtyfrag★ 6githubgithub.com/samanzamani/copy-fail-checker★ 4githubgithub.com/Koshmare-Blossom/Copyfail-sh★ 3githubgithub.com/haydenjames/CVE-2026-31431-check★ 3githubgithub.com/guiimoraes/CVE-2026-31431★ 3githubgithub.com/Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail★ 3githubgithub.com/lonelyor/CVE-2026-31431-exp★ 3githubgithub.com/Pithase/asm-copyfail★ 3githubgithub.com/bootsareme/copyfail-deconstructed★ 3githubgithub.com/juliosuas/copyfail-guard★ 2githubgithub.com/krisiasty/vcheck★ 2githubgithub.com/Iamliuxiaozhen/copy_fail★ 2githubgithub.com/st4rburn/RootRemover★ 2githubgithub.com/rvzsec/CVE-2026-31431★ 2githubgithub.com/adityasingh108/CVE-2026-31431-Metasploit-exploit★ 2githubgithub.com/waltrone1/copyfail-safe-check★ 2githubgithub.com/insomnisec/Detections-CVE-2026-31431★ 2githubgithub.com/Aurillium/RootRemover★ 2githubgithub.com/Lutfifakee-Project/CVE-2026-31431★ 1githubgithub.com/studiogangster/CVE-2026-31431★ 1githubgithub.com/4n4s4zi/copyfail-alpine★ 1githubgithub.com/Sebastian294/cve-2026-31431★ 1githubgithub.com/itsystem/afalg-check★ 1githubgithub.com/OpenPixelSystems/c-copy-fail★ 1githubgithub.com/dgrobinson0/CopyFile_CVE-2026-31431★ 1githubgithub.com/gbonacini/CVE-2026-31431★ 1githubgithub.com/1neptune/CopyFail★ 1githubgithub.com/gagaltotal/cve-2026-31431-copy-fail★ 1githubgithub.com/karollooool/Porting-CVE-2026-31431-Copy-Fail-to-a-Constrained-Java-Runner★ 1githubgithub.com/Juguitos/copy-fail★ 1githubgithub.com/DroPZsec/SplicePrivillegeEscalationFIX★ 0githubgithub.com/tang-yikai/copy-fail-mitigation-with-bpftrace★ 0githubgithub.com/abdelkabirouadoukou/CVE-2026-31431-Analysis-and-Fix★ 0githubgithub.com/julichaan/CVE-2026-31431-python-copyfail-POC★ 0githubgithub.com/p401a-ops/Copy-Fail★ 0githubgithub.com/polyakovavv/copyfail★ 0githubgithub.com/SilverRuler/copy-fail-CVE-2026-31431★ 0githubgithub.com/zKaaanon/ProyectoFinalSO★ 0githubgithub.com/zs1n/copy-fail-CVE-2026-31431★ 0githubgithub.com/Hunt-Benito/copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe★ 0githubgithub.com/mauricioportela/CVE-2026-31431-Analysis★ 0githubgithub.com/Mrhudson69/cve-2026-31431★ 0githubgithub.com/ikow/CVE-2026-31431-live-code-corruption★ 0githubgithub.com/Mr-bv/Copy-fail-CVE-2026-31431-Exploit-in-C★ 0githubgithub.com/vorkampfer/copyfail2_electric_boogaloo_fix★ 0githubgithub.com/hyz-is/copyfail-fix★ 0githubgithub.com/SystemVll/CVE-2026-31431-copyfail-aarch64★ 0githubgithub.com/kuniyal08/Copy-Fail-CVE-2026-31431-Lab★ 0githubgithub.com/yangh-beep/CVE-2026-31431-C★ 0githubgithub.com/JimmyPughtron/CVE-2026-31431-Copy-Fail---Minified-LPE-PoC★ 0githubgithub.com/wh1sky02/copy-fail-python★ 0githubgithub.com/ridhinva/linux-kernel-algif-aead-checker★ 0githubgithub.com/sh4den/CVE-2026-31431-copyfail-aarch64★ 0githubgithub.com/0xFuffM3/CVE-2026-31431-CopyFail★ 0githubgithub.com/dotPY-hax/CopyFail★ 0githubgithub.com/Maxime288/CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention★ 0githubgithub.com/royayub/CVE-2026-31431★ 0githubgithub.com/Yakovyakov/cve-2026-31431-mitigation★ 0githubgithub.com/cj667113/OCI-Ansible-Fix-CVE-2026-31431★ 0githubgithub.com/GubiczaP/cve-2026-31431-checker★ 0githubgithub.com/OmerAti/almalinux-fix-cve-2026-31431★ 0githubgithub.com/ROSNLR5/modrosnlr5★ 0githubgithub.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284★ 0githubgithub.com/ROSNLR5/MitigationToolkit-ROSN-LR5-Full★ 0githubgithub.com/hori0729/CVE-2026-31431-Verificador-Exploit★ 0githubgithub.com/jihwan77/Linux-Kernel-Copy-Fail-CVE-2026-31431-★ 0githubgithub.com/John-Popovici/CVE-2026-31431-CopyFail-Linux-PrivEsc★ 0githubgithub.com/ryan2929/CVE-2026-31431★ 0githubgithub.com/adampielak/CVE-2026-31431_SCA_WAZUH★ 0githubgithub.com/selectel/mks-copy-fail-mitigation★ 0githubgithub.com/luoqianlin/copyfail-c★ 0githubgithub.com/vorkampfer/copy_fail_mitigation★ 0githubgithub.com/deckhouse/d8-copy-fail-mitigation★ 0githubgithub.com/HulnotHutu/CVE-2026-31431★ 0githubgithub.com/K3ysTr0K3R/CVE-2026-31431-EXPLOIT★ 0githubgithub.com/Morton-Li/copy-fail-CVE-2026-31431★ 0githubgithub.com/cleozi/Copy_Grail★ 0githubgithub.com/monobrau/copyfailscan★ 0githubgithub.com/suominen/CVE-2026-31431★ 0githubgithub.com/aexdyhaxor/CVE-2026-31431-copy-fail★ 0githubgithub.com/Liverwortenuresis371/copyfail-rs★ 0githubgithub.com/adilkurtulmus/linux-copy-fail-CVE-2026-31431★ 0githubgithub.com/Karim33z/CVE-2026-31431★ 0githubgithub.com/u1tr0nex/CVE-2026-31431-CopyFail-Lab★ 0githubgithub.com/songzzzz/CVE-2026-31431★ 0githubgithub.com/vishvacyber/Detection-Tool-Kit-for-CVE-2026-31431★ 0githubgithub.com/tematemaru/CVE-2026-31431-simple-test★ 0githubgithub.com/t1ckprivate/CVE-2026-31431-Copy-Fail★ 0githubgithub.com/kinryulabs/rootpacket-cve-2026-31431★ 0githubgithub.com/SugiB3o/CVE-2026-31431★ 0githubgithub.com/1m1ssher/copy-fail-python★ 0githubgithub.com/Helios973/CVE-2026-31431_exp.c★ 0vulncheckvulncheck.com/xdb/703f06e3c018unverifiedvulncheckvulncheck.com/xdb/ade7180e9557unverifiedvulncheckvulncheck.com/xdb/44a7b6391805unverifiedvulncheckvulncheck.com/xdb/54d226c7f008unverifiedvulncheckvulncheck.com/xdb/12744358431bunverifiedvulncheckvulncheck.com/xdb/6c106bfa50cdunverifiedvulncheckvulncheck.com/xdb/de170dcd14f2unverifiedvulncheckvulncheck.com/xdb/f9c61f50747funverifiedvulncheckvulncheck.com/xdb/1059b89979a4unverifiedvulncheckvulncheck.com/xdb/2fc63bc01976unverifiedvulncheckvulncheck.com/xdb/e6a221b796a5unverifiedvulncheckvulncheck.com/xdb/47af9fad8d91unverifiedvulncheckvulncheck.com/xdb/fa0caebac8e3unverifiedvulncheckvulncheck.com/xdb/95a835f6fd6eunverifiedvulncheckvulncheck.com/xdb/30a610846534unverifiedvulncheckvulncheck.com/xdb/7a83c969191eunverifiedvulncheckvulncheck.com/xdb/fe9d5dbd8811unverifiedvulncheckvulncheck.com/xdb/f0e03492d88bunverifiedvulncheckvulncheck.com/xdb/e7179d2b3535unverifiedvulncheckvulncheck.com/xdb/e7b9da2bdfb6unverifiedvulncheckvulncheck.com/xdb/776718970d58unverifiedvulncheckvulncheck.com/xdb/8d7730781617unverifiedvulncheckvulncheck.com/xdb/e705019c9e13unverifiedvulncheckvulncheck.com/xdb/8a5d1a43302funverifiedvulncheckvulncheck.com/xdb/b850aae1d2f1unverifiedvulncheckvulncheck.com/xdb/8a1dc931a413unverifiedvulncheckvulncheck.com/xdb/32f668d95a3cunverifiedvulncheckvulncheck.com/xdb/caa8401b276bunverifiedvulncheckvulncheck.com/xdb/e8975e72b657unverifiedvulncheckvulncheck.com/xdb/99d5a0c16d46unverifiedvulncheckvulncheck.com/xdb/f2fbcd319431unverifiedvulncheckvulncheck.com/xdb/8ed7e7e1dbecunverifiedvulncheckvulncheck.com/xdb/cc826e9b1f99unverifiedvulncheckvulncheck.com/xdb/d4547dedf534unverifiedvulncheckvulncheck.com/xdb/d4a8585cc780unverifiedvulncheckvulncheck.com/xdb/f5c84cdf7433unverifiedvulncheckvulncheck.com/xdb/27df7faa07e4unverifiedvulncheckvulncheck.com/xdb/63e44759a331unverifiedvulncheckvulncheck.com/xdb/ecf4fface764unverifiedvulncheckvulncheck.com/xdb/cefede57bd6cunverifiedvulncheckvulncheck.com/xdb/2c1919a6d661unverifiedvulncheckvulncheck.com/xdb/37fe9295faa5unverifiedvulncheckvulncheck.com/xdb/5f08c8cf2c82unverifiedvulncheckvulncheck.com/xdb/ccc93a4a7915unverifiedvulncheckvulncheck.com/xdb/61f15b9998c1unverifiedvulncheckvulncheck.com/xdb/bca5bbcafe9aunverifiedvulncheckvulncheck.com/xdb/f41522587b83unverifiedvulncheckvulncheck.com/xdb/5fb77f5461c1unverifiedvulncheckvulncheck.com/xdb/3f419354d220unverifiedvulncheckvulncheck.com/xdb/80e9f00159b6unverifiedvulncheckvulncheck.com/xdb/311f8d0dcd9cunverifiedvulncheckvulncheck.com/xdb/da62a0a3ed75unverifiedvulncheckvulncheck.com/xdb/c94927d951f6unverifiedvulncheckvulncheck.com/xdb/5eb405ef3e03unverifiedvulncheckvulncheck.com/xdb/c936a9810115unverifiedvulncheckvulncheck.com/xdb/671d4d334dc6unverifiedvulncheckvulncheck.com/xdb/72fac779608bunverifiedvulncheckvulncheck.com/xdb/66ba94c6abcfunverifiedvulncheckvulncheck.com/xdb/4777718035edunverifiedvulncheckvulncheck.com/xdb/8adc8116b167unverifiedvulncheckvulncheck.com/xdb/d9502f3873ddunverifiedvulncheckvulncheck.com/xdb/0c18a2e65ff9unverifiedvulncheckvulncheck.com/xdb/0c8551d4d657unverifiedvulncheckvulncheck.com/xdb/a5ad9e692b5cunverifiedvulncheckvulncheck.com/xdb/ca2cd9e7077bunverifiedvulncheckvulncheck.com/xdb/b76ddd6c964eunverifiedvulncheckvulncheck.com/xdb/fdd7fa19f32bunverifiedvulncheckvulncheck.com/xdb/5f366e03c3f6unverifiedvulncheckvulncheck.com/xdb/c8112341a23aunverifiedvulncheckvulncheck.com/xdb/2301e0c020b4unverifiedvulncheckvulncheck.com/xdb/81835dda0c38unverifiedvulncheckvulncheck.com/xdb/d7d9e5b9fd16unverifiedvulncheckvulncheck.com/xdb/26ae8e310246unverifiedvulncheckvulncheck.com/xdb/cbbb8951ba6funverifiedvulncheckvulncheck.com/xdb/f28bcf69e8c5unverifiedvulncheckvulncheck.com/xdb/81e2219fb51funverifiedvulncheckvulncheck.com/xdb/2919864d2342unverifiedvulncheckvulncheck.com/xdb/5a97ebded855unverifiedvulncheckvulncheck.com/xdb/7bb49521c0feunverifiedvulncheckvulncheck.com/xdb/8be78296e330unverifiedvulncheckvulncheck.com/xdb/7559ee81de55unverifiedvulncheckvulncheck.com/xdb/7a46ec1a2cdfunverifiedvulncheckvulncheck.com/xdb/27e3e355e3edunverifiedvulncheckvulncheck.com/xdb/f5cbc3830b4bunverifiedvulncheckvulncheck.com/xdb/52dff7447042unverifiedvulncheckvulncheck.com/xdb/82678b24c229unverifiedvulncheckvulncheck.com/xdb/51384a253ee8unverifiedvulncheckvulncheck.com/xdb/3e94e36a8200unverifiedvulncheckvulncheck.com/xdb/6cdb93d7422aunverifiedvulncheckvulncheck.com/xdb/49a787f49e1funverifiedvulncheckvulncheck.com/xdb/5e770ec376e5unverifiedvulncheckvulncheck.com/xdb/ba9f92b0532aunverifiedvulncheckvulncheck.com/xdb/42d088b34c4aunverifiedvulncheckvulncheck.com/xdb/a7480893cc4aunverifiedvulncheckvulncheck.com/xdb/e019a0ad7709unverifiedvulncheckvulncheck.com/xdb/5ce5a6728fdbunverifiedvulncheckvulncheck.com/xdb/806397d1744dunverifiedvulncheckvulncheck.com/xdb/1aaefb624f3cunverifiedvulncheckvulncheck.com/xdb/95fbb448089bunverifiedvulncheckvulncheck.com/xdb/3e534ccda112unverifiedvulncheckvulncheck.com/xdb/9578e5d7370funverifiedvulncheckvulncheck.com/xdb/a1ed61b43658unverifiedvulncheckvulncheck.com/xdb/7c603ec28031unverifiedvulncheckvulncheck.com/xdb/3fc8c33cfed7unverifiedvulncheckvulncheck.com/xdb/087bdbd4d484unverifiedvulncheckvulncheck.com/xdb/d42248edb2beunverifiedvulncheckvulncheck.com/xdb/2999e0f30196unverifiedvulncheckvulncheck.com/xdb/f1f95ff6ea5aunverifiedvulncheckvulncheck.com/xdb/e0fbf0fb0b33unverifiedvulncheckvulncheck.com/xdb/904b4eade59eunverifiedvulncheckvulncheck.com/xdb/27b5c57ffa0bunverifiedvulncheckvulncheck.com/xdb/fdc3cefca634unverifiedvulncheckvulncheck.com/xdb/9f7c66e451f1unverifiedvulncheckvulncheck.com/xdb/ddb0f0a46323unverifiedvulncheckvulncheck.com/xdb/3ae800ee281dunverifiedvulncheckvulncheck.com/xdb/7ec336a3c0feunverifiedvulncheckvulncheck.com/xdb/9b3b53c42700unverifiedvulncheckvulncheck.com/xdb/b63bcc641b9funverifiedvulncheckvulncheck.com/xdb/b9fe99a594e2unverifiedvulncheckvulncheck.com/xdb/57899124a4d4unverifiedvulncheckvulncheck.com/xdb/5f4e8934338bunverifiedvulncheckvulncheck.com/xdb/219a113f77ddunverifiedvulncheckvulncheck.com/xdb/d4fcf068a14aunverifiedvulncheckvulncheck.com/xdb/85ba0f849f42unverifiedvulncheckvulncheck.com/xdb/525167cca95cunverifiedvulncheckvulncheck.com/xdb/8c50606c19f1unverifiedvulncheckvulncheck.com/xdb/eae26e697100unverifiedvulncheckvulncheck.com/xdb/39bbeddc2ee1unverifiedvulncheckvulncheck.com/xdb/02538ead1f6funverifiedvulncheckvulncheck.com/xdb/6ac73bbef175unverifiedvulncheckvulncheck.com/xdb/2a5fe12cfa62unverifiedvulncheckvulncheck.com/xdb/ebd03654d442unverifiedvulncheckvulncheck.com/xdb/b80c5c277d12unverifiedvulncheckvulncheck.com/xdb/088f026f994dunverifiedvulncheckvulncheck.com/xdb/0344acb15f6funverifiedvulncheckvulncheck.com/xdb/ab6a379a6c2eunverifiedvulncheckvulncheck.com/xdb/96b9d0ab5052unverifiedvulncheckvulncheck.com/xdb/21fe4fb5f902unverifiedvulncheckvulncheck.com/xdb/083c8438764dunverifiedvulncheckvulncheck.com/xdb/053326da627aunverifiedvulncheckvulncheck.com/xdb/f258994f2af7unverifiedvulncheckvulncheck.com/xdb/aab9515af4edunverifiedvulncheckvulncheck.com/xdb/1194be99c34aunverifiedcve_referencegithub.com/theori-io/copy-fail-CVE-2026-31431unverifiedvulncheckvulncheck.com/xdb/96df0a9d9b54unverifiedvulncheckvulncheck.com/xdb/9d371e69e91funverifiedvulncheckvulncheck.com/xdb/a6cb9f7846c0unverifiedvulncheckvulncheck.com/xdb/dfaebc9d85c3unverifiedvulncheckvulncheck.com/xdb/77484f693c3funverifiedvulncheckvulncheck.com/xdb/8d8075e702aeunverifiedvulncheckvulncheck.com/xdb/417e8d9024d2unverifiedvulncheckvulncheck.com/xdb/d9c62a99d699unverifiedvulncheckvulncheck.com/xdb/428a865efaaeunverifiedvulncheckvulncheck.com/xdb/d0672e30ff86unverifiedvulncheckvulncheck.com/xdb/2f3b35aa6f10unverifiedvulncheckvulncheck.com/xdb/63e9e85c5ca1unverifiedvulncheckvulncheck.com/xdb/ae1affad2f56unverifiedvulncheckvulncheck.com/xdb/355560e5c697unverifiedvulncheckvulncheck.com/xdb/9542cd3736b4unverifiedvulncheckvulncheck.com/xdb/1ba09dec0e2dunverifiedvulncheckvulncheck.com/xdb/206b72909d44unverifiedvulncheckvulncheck.com/xdb/9e7870d2a8b7unverifiedvulncheckvulncheck.com/xdb/697e0f5e15c1unverifiedvulncheckvulncheck.com/xdb/65f99cb91d24unverifiedvulncheckvulncheck.com/xdb/7d19ec4124d9unverifiedvulncheckvulncheck.com/xdb/59bbd1b8d099unverifiedvulncheckvulncheck.com/xdb/739156709f03unverifiedvulncheckvulncheck.com/xdb/eac74c2016bdunverifiedvulncheckvulncheck.com/xdb/bff693af86b2unverifiedvulncheckvulncheck.com/xdb/dcc0519bdf2bunverifiedvulncheckvulncheck.com/xdb/ed03078f1822unverifiedvulncheckvulncheck.com/xdb/ef7e08218bdaunverifiedvulncheckvulncheck.com/xdb/9f57f78ab452unverifiedvulncheckvulncheck.com/xdb/3b3c3a3ea186unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://access.redhat.com/errata/RHSA-2026:13565https://access.redhat.com/errata/RHSA-2026:13566https://access.redhat.com/errata/RHSA-2026:13577https://access.redhat.com/errata/RHSA-2026:13578https://access.redhat.com/errata/RHSA-2026:13681https://access.redhat.com/errata/RHSA-2026:13690https://access.redhat.com/errata/RHSA-2026:13727https://access.redhat.com/errata/RHSA-2026:13729https://access.redhat.com/errata/RHSA-2026:13734https://access.redhat.com/errata/RHSA-2026:13811https://access.redhat.com/errata/RHSA-2026:13862https://access.redhat.com/errata/RHSA-2026:13885