VulnRadar

Data against noise.

Built with NaN
Page generated: 09 Nov 2026, 03:10 UTC
← Dashboard

CVE-2026-31431

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the sourc…

Read full description
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
CVSS 7.8 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.3/10
REALITY · THREAT PRIORITY
8.7/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 7.8: +1.17
  • Fresh EPSS: 98.11%: +0.49

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 55 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
5/100
Grounded branding (15%)
0/100
HYPE TOTAL3/100

Sources and documents

DeXpose
Press · 23 Oct 2026, 11:56 · CVE 2026 | The Complete Guide to New, Critical & Actively Exploited Vulnerabilities (Updated Weekly) - DeXpose
gHacks
Press · 21 Sep 2026, 07:00 · Microsoft Fixes Broken Copy and Paste for Excel 2016 After September Update Bug - gHacks
Windows Latest
Press · 17 Sep 2026, 07:00 · Microsoft confirms it accidentally broke copy and paste in Excel with a major security update you shouldn’t remove - Windows Latest
BleepingComputer
Press · 15 Sep 2026, 07:00 · Microsoft confirms KB5002914 Excel update breaks copy and paste - BleepingComputer
BleepingComputer
Press · 10 Sep 2026, 07:00 · Microsoft Excel KB5002914 update breaks copy and paste for some users - BleepingComputer
See all 55 source documents
Media in Canada
Press · 31 Aug 2026, 07:00 · Why copy-paste national campaigns fail in Quebec - Media in Canada
Windows Latest
Press · 23 Aug 2026, 07:00 · "Sort of a feature," Microsoft on why Ctrl+C fails on Windows 11 due to a design choice for Clipboard history - Windows Latest
https://tech-insider.org/
Press · 05 Aug 2026, 07:00 · Linux Copy Fail Flaw: CVSS 7.8, Root in Seconds [2026] - https://tech-insider.org/
The Register
Press · 23 May 2026, 07:00 · AI eyes scanning for bugs create a worrisome Linux security trend - The Register
Mishcon de Reya LLP
Press · 18 May 2026, 07:00 · Copy Fail: A Linux Kernel flaw enabling root access - Mishcon de Reya LLP
Hackaday
Press · 16 May 2026, 07:00 · After Stumbling From CVE To CVE Will Linux Get A Kill Switch? - Hackaday
infoq.com
Press · 12 May 2026, 07:00 · Copy Fail and Dirty Frag: Linux Page-Cache Exploits Target Every Major Distribution - infoq.com
ReversingLabs
Press · 12 May 2026, 07:00 · How Dirty Frag rose from the Linux exploit Copy Fail | RL Blog - ReversingLabs
Dark Reading
Press · 11 May 2026, 07:00 · 'Dirty Frag' Exploit Poised to Blow Up on Enterprise Linux Distros - Dark Reading
The Record from Recorded Future News
Press · 11 May 2026, 07:00 · Dirty Frag: Linux kernel hit by second major security flaw in two weeks - The Record from Recorded Future News
CSO Online
Press · 11 May 2026, 07:00 · New ‘Dirty Frag’ exploit targets Linux kernel for root access - CSO Online
SecurityWeek
Press · 11 May 2026, 07:00 · New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks - SecurityWeek
Infosecurity Magazine
Press · 11 May 2026, 07:00 · Rushed Patches Follow Broken Embargo on New Linux Kernel Vulnerabilities - Infosecurity Magazine
9to5Linux
Press · 09 May 2026, 07:00 · Parrot 7.2 Is Now Officially Available for Download with "Copy Fail" Patch - 9to5Linux
Linuxiac
Press · 08 May 2026, 07:00 · After Copy Fail, Linux Now Faces Dirty Frag Privilege Flaw - Linuxiac
System76
Press · 08 May 2026, 07:00 · Linux Zero-Day Dirty Frag and Copy Fail Vulnerability Fixes Released - System76
The Hacker News
Press · 08 May 2026, 07:00 · Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions - The Hacker News
Microsoft
Press · 08 May 2026, 07:00 · Active attack: Dirty Frag Linux vulnerability expands post-compromise risk - Microsoft
wiz.io
Press · 08 May 2026, 07:00 · Dirty Frag: Linux Kernel Local Privilege Escalation via ESP and RxRPC - wiz.io
Hong Kong Computer Emergency Response Team Coordination Centre
Press · 08 May 2026, 07:00 · RedHat Linux Kernel Multiple Vulnerabilities - Hong Kong Computer Emergency Response Team Coordination Centre
Tom's Hardware
Press · 07 May 2026, 07:00 · Devastating 'Dirty Frag' exploit leaks out, gives immediate root access on most Linux machines since 2017, no patches available, no warning given — Copy Fail-like vulnerability had its embargo broken - Tom's Hardware
Cloudflare Blog
Press · 07 May 2026, 07:00 · How Cloudflare responded to the “Copy Fail” Linux vulnerability - Cloudflare Blog
It's FOSS
Press · 06 May 2026, 07:00 · Should You Be Worried About The Copy Fail Linux Exploit? - It's FOSS
Hong Kong Computer Emergency Response Team Coordination Centre
Press · 06 May 2026, 07:00 · SUSE Linux Kernel Multiple Vulnerabilities - Hong Kong Computer Emergency Response Team Coordination Centre
ZDNET
Press · 05 May 2026, 07:00 · This critical Linux vulnerability is putting millions of systems at risk – how to protect yours - ZDNET
Unit 42
Press · 05 May 2026, 07:00 · Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years - Unit 42
PCWorld
Press · 04 May 2026, 07:00 · Linux ‘Copy Fail’ flaw lets anyone hijack system privileges. Update ASAP - PCWorld
CyberScoop
Press · 04 May 2026, 07:00 · ‘Copy Fail’ is a real Linux security crisis wrapped in AI slop - CyberScoop
Hong Kong Computer Emergency Response Team Coordination Centre
Press · 04 May 2026, 07:00 · Linux Kernel Elevation of Privilege Vulnerability - Hong Kong Computer Emergency Response Team Coordination Centre
SecurityWeek
Press · 04 May 2026, 07:00 · Exploitation of ‘Copy Fail’ Linux Vulnerability Begins - SecurityWeek
BleepingComputer
Press · 04 May 2026, 07:00 · CISA says ‘Copy Fail’ flaw now exploited to root Linux systems - BleepingComputer
The Hacker News
Press · 03 May 2026, 07:00 · CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV - The Hacker News
Infosecurity Magazine
Press · 01 May 2026, 07:00 · Nine-Year-Old Zero-Day Flaw in Linux Kernel Discovered by AI-Equipped Security Researcher - Infosecurity Magazine
Techzine Global
Press · 01 May 2026, 07:00 · Linux distributions worldwide targeted by the Copy Fail exploit - Techzine Global
Microsoft
Press · 01 May 2026, 07:00 · CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments - Microsoft
The Record from Recorded Future News
Press · 01 May 2026, 07:00 · Nearly every Linux system built since 2017 vulnerable to ‘Copy Fail’ flaw - The Record from Recorded Future News
ReversingLabs
Press · 01 May 2026, 07:00 · Copy Fail Flaw: 5 YARA Rules for Detection and Remediation | RL Blog - ReversingLabs
Rapid7
Press · 01 May 2026, 07:00 · Metasploit Wrap-Up 05/01/2026 - Rapid7
wiz.io
Press · 01 May 2026, 07:00 · Copy Fail: Universal Linux Local Privilege Escalation Vulnerability - wiz.io
Sophos
Press · 01 May 2026, 07:00 · Proof-of-concept exploit available for Linux 'Copy Fail' vulnerability (CVE-2026-31431) - Sophos
BankInfoSecurity
Press · 30 Apr 2026, 15:08 · Linux 'Copy Fail' Flaw Delivers Root-Level Access to Distros - BankInfoSecurity
Dark Reading
Press · 30 Apr 2026, 07:00 · Another AI-Assisted Software Scan Yields 9-Year-Old Linux Bug - Dark Reading
Field Effect
Press · 30 Apr 2026, 07:00 · Copy Fail: Linux kernel privilege escalation flaw publicly disclosed - Field Effect
Security Affairs
Press · 30 Apr 2026, 07:00 · Copy Fail: New Linux bug enables Root via page‑cache corruption - Security Affairs
BleepingComputer
Press · 30 Apr 2026, 07:00 · New Linux ‘Copy Fail’ flaw gives hackers root on major distros - BleepingComputer
SecurityWeek
Press · 30 Apr 2026, 07:00 · ‘Copy Fail’ Logic Flaw in Linux Kernel Enables System Takeover - SecurityWeek
Help Net Security
Press · 30 Apr 2026, 07:00 · Nine-year-old Linux kernel flaw enables reliable local privilege escalation (CVE-2026-31431) - Help Net Security
SOC Prime
Press · 30 Apr 2026, 07:00 · “Copy Fail” – Linux local privilege escalation vulnerability (CVE-2026-31431) - SOC Prime
The Hacker News
Press · 30 Apr 2026, 07:00 · New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions - The Hacker News
iZOOlogic
Press · 29 Apr 2026, 07:00 · CVE-2026-31431: Copy Fail Linux Root Exploit - iZOOlogic

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.3 · reality 8.7 (2026-11-02 15:14). The curve appears once the score changes.

Public exploit evidence

56

Public exploit entries / repo candidates

See 30 repos with metrics
RepositoryStarsForksLanguageUpdated
rootsecdev/cve_2026_31431577112Python29 Apr 2026, 18:24
Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC19426C07 May 2026, 09:04
Crihexe/copy-fail-tiny-elf-CVE-2026-314316410Shell03 May 2026, 01:42
iss4cf0ng/CVE-2026-31431-Linux-Copy-Fail5621Rust30 Apr 2026, 15:39
KaraZajac/DIRTYFAIL3012C17 May 2026, 14:38
liamromanis101/CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script262Shell06 May 2026, 14:09
Smarttfoxx/copyfail206C12 May 2026, 13:44
diemoeve/copyfail-rs183Rust06 May 2026, 12:42
sammwyy/copyfail-rs152Rust30 Apr 2026, 14:44
MartinPham/copy-fail-CVE-2026-31431-php90PHP02 May 2026, 07:31
4xura/CVE-2026-31431-Copy-Fail80C19 May 2026, 09:22
0xlane/pagecache-guard72Python11 May 2026, 06:31
AliHzSec/CVE-2026-3143177Python01 May 2026, 10:29
Juguitos/copy-fail42Python09 May 2026, 17:48
rvzsec/CVE-2026-3143141Shell08 May 2026, 12:50
Sl4cK0TH/CVE-2026-31431-PoC41Python02 May 2026, 15:10
g1nt0n1x/copy-fail-CVE-2026-31431-shell30Shell04 May 2026, 07:55
Percivalll/Copy-Fail-CVE-2026-31431-Statically-PoC31Go30 Apr 2026, 03:51
pyroceper/copy-fail-CVE-2026-3143130C03 May 2026, 03:02
SpenserCai/copy_fail30Rust01 May 2026, 14:07
yuspring/cve-2026-31431-poc33Python01 May 2026, 00:07
3jee/copy-fail-go20Go01 May 2026, 03:20
4n4s4zi/copyfail-alpine20Go04 Jun 2026, 01:15
kvakirsanov/CVE-2026-31431-live-process-code-injection20Python01 May 2026, 11:46
pedromizz/copy-fail21Python02 May 2026, 23:18
xn0kkx/CVE-2026-31431_CopyFail_LinuxKernel_LPE20Python04 May 2026, 02:02
DENNISDGR/CVE-2026-31431-poc10Python30 Apr 2026, 21:10
Fulucky0-yuri/CVE-2026-31431-PocC10C01 May 2026, 10:23
Naimadx123/cve_2026_3143110—29 Apr 2026, 18:24
Sebastian294/cve-2026-3143110Python15 May 2026, 03:01
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 7.8; EPSS 98.1%
Attention, last 30 days
1 distinct story titles; 1 press documents; 1 publisher domains.
Technical potential
local access, low privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 14:00:05.726222+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Published
22 Apr 2026, 08:15
First press mention
29 Apr 2026, 07:00
Added to the CISA KEV catalog
01 May 2026, 00:00
Latest press mention
23 Oct 2026, 11:56
Score calculated
05 Nov 2026, 14:00
PoCs on GitHub
56 repositories
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar