crypto: algif_aead - Revert to operating out-of-place
100Vexday Risk Score
Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.
ssvc Actcvss 7.8epss 100%
de la publicación al arma0 días
Publicada en NVD22 abr
1ª PoC8 mar
metasploit+7d
CISA KEV+9d
probabilidad de explotación
100%top 1% de las CVE
explotación observada
síCISA + VulnCheck
276 exploit(s) público(s)
Acción exigida por CISAplazo federal: 2026-05-15
"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Versiones
Afectadas
Linux/Kernel >= 4.14.0 < 5.10.254; Linux/Kernel >= 5.11.0 < 5.15.204; Linux/Kernel >= 5.16.0 < 6.1.170; Linux/Kernel >= 6.2.0 < 6.6.137; Linux/Kernel >= 6.7.0 < 6.12.85; Linux/Kernel >= 6.13.0 < 6.18.22
Corregidas en
Linux/Kernel 5.10.254; Linux/Kernel 5.15.204; Linux/Kernel 6.1.170; Linux/Kernel 6.6.137; Linux/Kernel 6.12.85; Linux/Kernel 6.18.22
Investigado y redactado con IA a partir del advisory del fabricante y análisis públicos, con las fuentes citadas. Verifica siempre la versión corregida en el advisory oficial antes de actuar.
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Linux · LinuxPoCs públicas encontradas — 276
githubgithub.com/tgies/copy-fail-c★ 434githubgithub.com/cozystack/copy-fail-blocker★ 31githubgithub.com/KaraZajac/DIRTYFAIL★ 23githubgithub.com/Smarttfoxx/copyfail★ 20githubgithub.com/sgkdev/ptrace_may_dream★ 20githubgithub.com/JuanBindez/CVE-2026-31431★ 14githubgithub.com/philfry/cve-2026-31431-ftrace★ 12githubgithub.com/ochebotar/copy-fail-CVE-2026-31431-detection-probe★ 10githubgithub.com/yandex-cloud-examples/yc-mk8s-copy-fail-mitigation★ 10githubgithub.com/4xura/CVE-2026-31431-Copy-Fail★ 6githubgithub.com/infiniroot/ansible-mitigate-copyfail-dirtyfrag★ 6githubgithub.com/samanzamani/copy-fail-checker★ 4githubgithub.com/Koshmare-Blossom/Copyfail-sh★ 3githubgithub.com/haydenjames/CVE-2026-31431-check★ 3githubgithub.com/guiimoraes/CVE-2026-31431★ 3githubgithub.com/Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail★ 3githubgithub.com/lonelyor/CVE-2026-31431-exp★ 3githubgithub.com/Pithase/asm-copyfail★ 3githubgithub.com/bootsareme/copyfail-deconstructed★ 3githubgithub.com/juliosuas/copyfail-guard★ 2githubgithub.com/krisiasty/vcheck★ 2githubgithub.com/Iamliuxiaozhen/copy_fail★ 2githubgithub.com/st4rburn/RootRemover★ 2githubgithub.com/rvzsec/CVE-2026-31431★ 2githubgithub.com/adityasingh108/CVE-2026-31431-Metasploit-exploit★ 2githubgithub.com/waltrone1/copyfail-safe-check★ 2githubgithub.com/insomnisec/Detections-CVE-2026-31431★ 2githubgithub.com/Aurillium/RootRemover★ 2githubgithub.com/Lutfifakee-Project/CVE-2026-31431★ 1githubgithub.com/studiogangster/CVE-2026-31431★ 1githubgithub.com/4n4s4zi/copyfail-alpine★ 1githubgithub.com/Sebastian294/cve-2026-31431★ 1githubgithub.com/itsystem/afalg-check★ 1githubgithub.com/OpenPixelSystems/c-copy-fail★ 1githubgithub.com/dgrobinson0/CopyFile_CVE-2026-31431★ 1githubgithub.com/gbonacini/CVE-2026-31431★ 1githubgithub.com/1neptune/CopyFail★ 1githubgithub.com/gagaltotal/cve-2026-31431-copy-fail★ 1githubgithub.com/karollooool/Porting-CVE-2026-31431-Copy-Fail-to-a-Constrained-Java-Runner★ 1githubgithub.com/Juguitos/copy-fail★ 1githubgithub.com/DroPZsec/SplicePrivillegeEscalationFIX★ 0githubgithub.com/tang-yikai/copy-fail-mitigation-with-bpftrace★ 0githubgithub.com/abdelkabirouadoukou/CVE-2026-31431-Analysis-and-Fix★ 0githubgithub.com/julichaan/CVE-2026-31431-python-copyfail-POC★ 0githubgithub.com/p401a-ops/Copy-Fail★ 0githubgithub.com/polyakovavv/copyfail★ 0githubgithub.com/SilverRuler/copy-fail-CVE-2026-31431★ 0githubgithub.com/zKaaanon/ProyectoFinalSO★ 0githubgithub.com/zs1n/copy-fail-CVE-2026-31431★ 0githubgithub.com/Hunt-Benito/copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe★ 0githubgithub.com/mauricioportela/CVE-2026-31431-Analysis★ 0githubgithub.com/Mrhudson69/cve-2026-31431★ 0githubgithub.com/ikow/CVE-2026-31431-live-code-corruption★ 0githubgithub.com/Mr-bv/Copy-fail-CVE-2026-31431-Exploit-in-C★ 0githubgithub.com/vorkampfer/copyfail2_electric_boogaloo_fix★ 0githubgithub.com/hyz-is/copyfail-fix★ 0githubgithub.com/SystemVll/CVE-2026-31431-copyfail-aarch64★ 0githubgithub.com/kuniyal08/Copy-Fail-CVE-2026-31431-Lab★ 0githubgithub.com/yangh-beep/CVE-2026-31431-C★ 0githubgithub.com/JimmyPughtron/CVE-2026-31431-Copy-Fail---Minified-LPE-PoC★ 0githubgithub.com/wh1sky02/copy-fail-python★ 0githubgithub.com/ridhinva/linux-kernel-algif-aead-checker★ 0githubgithub.com/sh4den/CVE-2026-31431-copyfail-aarch64★ 0githubgithub.com/0xFuffM3/CVE-2026-31431-CopyFail★ 0githubgithub.com/dotPY-hax/CopyFail★ 0githubgithub.com/Maxime288/CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention★ 0githubgithub.com/royayub/CVE-2026-31431★ 0githubgithub.com/Yakovyakov/cve-2026-31431-mitigation★ 0githubgithub.com/cj667113/OCI-Ansible-Fix-CVE-2026-31431★ 0githubgithub.com/GubiczaP/cve-2026-31431-checker★ 0githubgithub.com/OmerAti/almalinux-fix-cve-2026-31431★ 0githubgithub.com/ROSNLR5/modrosnlr5★ 0githubgithub.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284★ 0githubgithub.com/ROSNLR5/MitigationToolkit-ROSN-LR5-Full★ 0githubgithub.com/hori0729/CVE-2026-31431-Verificador-Exploit★ 0githubgithub.com/jihwan77/Linux-Kernel-Copy-Fail-CVE-2026-31431-★ 0githubgithub.com/John-Popovici/CVE-2026-31431-CopyFail-Linux-PrivEsc★ 0githubgithub.com/ryan2929/CVE-2026-31431★ 0githubgithub.com/adampielak/CVE-2026-31431_SCA_WAZUH★ 0githubgithub.com/selectel/mks-copy-fail-mitigation★ 0githubgithub.com/luoqianlin/copyfail-c★ 0githubgithub.com/vorkampfer/copy_fail_mitigation★ 0githubgithub.com/deckhouse/d8-copy-fail-mitigation★ 0githubgithub.com/HulnotHutu/CVE-2026-31431★ 0githubgithub.com/K3ysTr0K3R/CVE-2026-31431-EXPLOIT★ 0githubgithub.com/Morton-Li/copy-fail-CVE-2026-31431★ 0githubgithub.com/cleozi/Copy_Grail★ 0githubgithub.com/monobrau/copyfailscan★ 0githubgithub.com/suominen/CVE-2026-31431★ 0githubgithub.com/aexdyhaxor/CVE-2026-31431-copy-fail★ 0githubgithub.com/Liverwortenuresis371/copyfail-rs★ 0githubgithub.com/adilkurtulmus/linux-copy-fail-CVE-2026-31431★ 0githubgithub.com/Karim33z/CVE-2026-31431★ 0githubgithub.com/u1tr0nex/CVE-2026-31431-CopyFail-Lab★ 0githubgithub.com/songzzzz/CVE-2026-31431★ 0githubgithub.com/vishvacyber/Detection-Tool-Kit-for-CVE-2026-31431★ 0githubgithub.com/tematemaru/CVE-2026-31431-simple-test★ 0githubgithub.com/t1ckprivate/CVE-2026-31431-Copy-Fail★ 0githubgithub.com/kinryulabs/rootpacket-cve-2026-31431★ 0githubgithub.com/SugiB3o/CVE-2026-31431★ 0githubgithub.com/1m1ssher/copy-fail-python★ 0githubgithub.com/Helios973/CVE-2026-31431_exp.c★ 0vulncheckvulncheck.com/xdb/703f06e3c018no verificadovulncheckvulncheck.com/xdb/ade7180e9557no verificadovulncheckvulncheck.com/xdb/44a7b6391805no verificadovulncheckvulncheck.com/xdb/54d226c7f008no verificadovulncheckvulncheck.com/xdb/12744358431bno verificadovulncheckvulncheck.com/xdb/6c106bfa50cdno verificadovulncheckvulncheck.com/xdb/de170dcd14f2no verificadovulncheckvulncheck.com/xdb/f9c61f50747fno verificadovulncheckvulncheck.com/xdb/1059b89979a4no verificadovulncheckvulncheck.com/xdb/2fc63bc01976no verificadovulncheckvulncheck.com/xdb/e6a221b796a5no verificadovulncheckvulncheck.com/xdb/47af9fad8d91no verificadovulncheckvulncheck.com/xdb/fa0caebac8e3no verificadovulncheckvulncheck.com/xdb/95a835f6fd6eno verificadovulncheckvulncheck.com/xdb/30a610846534no verificadovulncheckvulncheck.com/xdb/7a83c969191eno verificadovulncheckvulncheck.com/xdb/fe9d5dbd8811no verificadovulncheckvulncheck.com/xdb/f0e03492d88bno verificadovulncheckvulncheck.com/xdb/e7179d2b3535no verificadovulncheckvulncheck.com/xdb/e7b9da2bdfb6no verificadovulncheckvulncheck.com/xdb/776718970d58no verificadovulncheckvulncheck.com/xdb/8d7730781617no verificadovulncheckvulncheck.com/xdb/e705019c9e13no verificadovulncheckvulncheck.com/xdb/8a5d1a43302fno verificadovulncheckvulncheck.com/xdb/b850aae1d2f1no verificadovulncheckvulncheck.com/xdb/8a1dc931a413no verificadovulncheckvulncheck.com/xdb/32f668d95a3cno verificadovulncheckvulncheck.com/xdb/caa8401b276bno verificadovulncheckvulncheck.com/xdb/e8975e72b657no verificadovulncheckvulncheck.com/xdb/99d5a0c16d46no verificadovulncheckvulncheck.com/xdb/f2fbcd319431no verificadovulncheckvulncheck.com/xdb/8ed7e7e1dbecno verificadovulncheckvulncheck.com/xdb/cc826e9b1f99no verificadovulncheckvulncheck.com/xdb/d4547dedf534no verificadovulncheckvulncheck.com/xdb/d4a8585cc780no verificadovulncheckvulncheck.com/xdb/f5c84cdf7433no verificadovulncheckvulncheck.com/xdb/27df7faa07e4no verificadovulncheckvulncheck.com/xdb/63e44759a331no verificadovulncheckvulncheck.com/xdb/ecf4fface764no verificadovulncheckvulncheck.com/xdb/cefede57bd6cno verificadovulncheckvulncheck.com/xdb/2c1919a6d661no verificadovulncheckvulncheck.com/xdb/37fe9295faa5no verificadovulncheckvulncheck.com/xdb/5f08c8cf2c82no verificadovulncheckvulncheck.com/xdb/ccc93a4a7915no verificadovulncheckvulncheck.com/xdb/61f15b9998c1no verificadovulncheckvulncheck.com/xdb/bca5bbcafe9ano verificadovulncheckvulncheck.com/xdb/f41522587b83no verificadovulncheckvulncheck.com/xdb/5fb77f5461c1no verificadovulncheckvulncheck.com/xdb/3f419354d220no verificadovulncheckvulncheck.com/xdb/80e9f00159b6no verificadovulncheckvulncheck.com/xdb/311f8d0dcd9cno verificadovulncheckvulncheck.com/xdb/da62a0a3ed75no verificadovulncheckvulncheck.com/xdb/c94927d951f6no verificadovulncheckvulncheck.com/xdb/5eb405ef3e03no verificadovulncheckvulncheck.com/xdb/c936a9810115no verificadovulncheckvulncheck.com/xdb/671d4d334dc6no verificadovulncheckvulncheck.com/xdb/72fac779608bno verificadovulncheckvulncheck.com/xdb/66ba94c6abcfno verificadovulncheckvulncheck.com/xdb/4777718035edno verificadovulncheckvulncheck.com/xdb/8adc8116b167no verificadovulncheckvulncheck.com/xdb/d9502f3873ddno verificadovulncheckvulncheck.com/xdb/0c18a2e65ff9no verificadovulncheckvulncheck.com/xdb/0c8551d4d657no verificadovulncheckvulncheck.com/xdb/a5ad9e692b5cno verificadovulncheckvulncheck.com/xdb/ca2cd9e7077bno verificadovulncheckvulncheck.com/xdb/b76ddd6c964eno verificadovulncheckvulncheck.com/xdb/fdd7fa19f32bno verificadovulncheckvulncheck.com/xdb/5f366e03c3f6no verificadovulncheckvulncheck.com/xdb/c8112341a23ano verificadovulncheckvulncheck.com/xdb/2301e0c020b4no verificadovulncheckvulncheck.com/xdb/81835dda0c38no verificadovulncheckvulncheck.com/xdb/d7d9e5b9fd16no verificadovulncheckvulncheck.com/xdb/26ae8e310246no verificadovulncheckvulncheck.com/xdb/cbbb8951ba6fno verificadovulncheckvulncheck.com/xdb/f28bcf69e8c5no verificadovulncheckvulncheck.com/xdb/81e2219fb51fno verificadovulncheckvulncheck.com/xdb/2919864d2342no verificadovulncheckvulncheck.com/xdb/5a97ebded855no verificadovulncheckvulncheck.com/xdb/7bb49521c0feno verificadovulncheckvulncheck.com/xdb/8be78296e330no verificadovulncheckvulncheck.com/xdb/7559ee81de55no verificadovulncheckvulncheck.com/xdb/7a46ec1a2cdfno verificadovulncheckvulncheck.com/xdb/27e3e355e3edno verificadovulncheckvulncheck.com/xdb/f5cbc3830b4bno verificadovulncheckvulncheck.com/xdb/52dff7447042no verificadovulncheckvulncheck.com/xdb/82678b24c229no verificadovulncheckvulncheck.com/xdb/51384a253ee8no verificadovulncheckvulncheck.com/xdb/3e94e36a8200no verificadovulncheckvulncheck.com/xdb/6cdb93d7422ano verificadovulncheckvulncheck.com/xdb/49a787f49e1fno verificadovulncheckvulncheck.com/xdb/5e770ec376e5no verificadovulncheckvulncheck.com/xdb/ba9f92b0532ano verificadovulncheckvulncheck.com/xdb/42d088b34c4ano verificadovulncheckvulncheck.com/xdb/a7480893cc4ano verificadovulncheckvulncheck.com/xdb/e019a0ad7709no verificadovulncheckvulncheck.com/xdb/5ce5a6728fdbno verificadovulncheckvulncheck.com/xdb/806397d1744dno verificadovulncheckvulncheck.com/xdb/1aaefb624f3cno verificadovulncheckvulncheck.com/xdb/95fbb448089bno verificadovulncheckvulncheck.com/xdb/3e534ccda112no verificadovulncheckvulncheck.com/xdb/9578e5d7370fno verificadovulncheckvulncheck.com/xdb/a1ed61b43658no verificadovulncheckvulncheck.com/xdb/7c603ec28031no verificadovulncheckvulncheck.com/xdb/3fc8c33cfed7no verificadovulncheckvulncheck.com/xdb/087bdbd4d484no verificadovulncheckvulncheck.com/xdb/d42248edb2beno verificadovulncheckvulncheck.com/xdb/2999e0f30196no verificadovulncheckvulncheck.com/xdb/f1f95ff6ea5ano verificadovulncheckvulncheck.com/xdb/e0fbf0fb0b33no verificadovulncheckvulncheck.com/xdb/904b4eade59eno verificadovulncheckvulncheck.com/xdb/27b5c57ffa0bno verificadovulncheckvulncheck.com/xdb/fdc3cefca634no verificadovulncheckvulncheck.com/xdb/9f7c66e451f1no verificadovulncheckvulncheck.com/xdb/ddb0f0a46323no verificadovulncheckvulncheck.com/xdb/3ae800ee281dno verificadovulncheckvulncheck.com/xdb/7ec336a3c0feno verificadovulncheckvulncheck.com/xdb/9b3b53c42700no verificadovulncheckvulncheck.com/xdb/b63bcc641b9fno verificadovulncheckvulncheck.com/xdb/b9fe99a594e2no verificadovulncheckvulncheck.com/xdb/57899124a4d4no verificadovulncheckvulncheck.com/xdb/5f4e8934338bno verificadovulncheckvulncheck.com/xdb/219a113f77ddno verificadovulncheckvulncheck.com/xdb/d4fcf068a14ano verificadovulncheckvulncheck.com/xdb/85ba0f849f42no verificadovulncheckvulncheck.com/xdb/525167cca95cno verificadovulncheckvulncheck.com/xdb/8c50606c19f1no verificadovulncheckvulncheck.com/xdb/eae26e697100no verificadovulncheckvulncheck.com/xdb/39bbeddc2ee1no verificadovulncheckvulncheck.com/xdb/02538ead1f6fno verificadovulncheckvulncheck.com/xdb/6ac73bbef175no verificadovulncheckvulncheck.com/xdb/2a5fe12cfa62no verificadovulncheckvulncheck.com/xdb/ebd03654d442no verificadovulncheckvulncheck.com/xdb/b80c5c277d12no verificadovulncheckvulncheck.com/xdb/088f026f994dno verificadovulncheckvulncheck.com/xdb/0344acb15f6fno verificadovulncheckvulncheck.com/xdb/ab6a379a6c2eno verificadovulncheckvulncheck.com/xdb/96b9d0ab5052no verificadovulncheckvulncheck.com/xdb/21fe4fb5f902no verificadovulncheckvulncheck.com/xdb/083c8438764dno verificadovulncheckvulncheck.com/xdb/053326da627ano verificadovulncheckvulncheck.com/xdb/f258994f2af7no verificadovulncheckvulncheck.com/xdb/aab9515af4edno verificadovulncheckvulncheck.com/xdb/1194be99c34ano verificadocve_referencegithub.com/theori-io/copy-fail-CVE-2026-31431no verificadovulncheckvulncheck.com/xdb/96df0a9d9b54no verificadovulncheckvulncheck.com/xdb/9d371e69e91fno verificadovulncheckvulncheck.com/xdb/a6cb9f7846c0no verificadovulncheckvulncheck.com/xdb/dfaebc9d85c3no verificadovulncheckvulncheck.com/xdb/77484f693c3fno verificadovulncheckvulncheck.com/xdb/8d8075e702aeno verificadovulncheckvulncheck.com/xdb/417e8d9024d2no verificadovulncheckvulncheck.com/xdb/d9c62a99d699no verificadovulncheckvulncheck.com/xdb/428a865efaaeno verificadovulncheckvulncheck.com/xdb/d0672e30ff86no verificadovulncheckvulncheck.com/xdb/2f3b35aa6f10no verificadovulncheckvulncheck.com/xdb/63e9e85c5ca1no verificadovulncheckvulncheck.com/xdb/ae1affad2f56no verificadovulncheckvulncheck.com/xdb/355560e5c697no verificadovulncheckvulncheck.com/xdb/9542cd3736b4no verificadovulncheckvulncheck.com/xdb/1ba09dec0e2dno verificadovulncheckvulncheck.com/xdb/206b72909d44no verificadovulncheckvulncheck.com/xdb/9e7870d2a8b7no verificadovulncheckvulncheck.com/xdb/697e0f5e15c1no verificadovulncheckvulncheck.com/xdb/65f99cb91d24no verificadovulncheckvulncheck.com/xdb/7d19ec4124d9no verificadovulncheckvulncheck.com/xdb/59bbd1b8d099no verificadovulncheckvulncheck.com/xdb/739156709f03no verificadovulncheckvulncheck.com/xdb/eac74c2016bdno verificadovulncheckvulncheck.com/xdb/bff693af86b2no verificadovulncheckvulncheck.com/xdb/dcc0519bdf2bno verificadovulncheckvulncheck.com/xdb/ed03078f1822no verificadovulncheckvulncheck.com/xdb/ef7e08218bdano verificadovulncheckvulncheck.com/xdb/9f57f78ab452no verificadovulncheckvulncheck.com/xdb/3b3c3a3ea186no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://access.redhat.com/errata/RHSA-2026:13565https://access.redhat.com/errata/RHSA-2026:13566https://access.redhat.com/errata/RHSA-2026:13577https://access.redhat.com/errata/RHSA-2026:13578https://access.redhat.com/errata/RHSA-2026:13681https://access.redhat.com/errata/RHSA-2026:13690https://access.redhat.com/errata/RHSA-2026:13727https://access.redhat.com/errata/RHSA-2026:13729https://access.redhat.com/errata/RHSA-2026:13734https://access.redhat.com/errata/RHSA-2026:13811https://access.redhat.com/errata/RHSA-2026:13862https://access.redhat.com/errata/RHSA-2026:13885