crypto: algif_aead - Revert to operating out-of-place
100Vexday Risk Score
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
ssvc Actcvss 7.8epss 100%
from disclosure to weapon0 days
Published on NVDApr 22
1st PoCMar 8
metasploit+7d
CISA KEV+9d
exploitation probability
100%top 1% of all CVEs
observed exploitation
yesCISA + VulnCheck
279 public exploit(s)
What the vendors declare (VEX)
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Red HatVEX document ↗
Affected
1 product
Red Hat OpenShift Container Platform 4
workaround: See the security bulletin for a detailed mitigation procedure.
Fixed
55 products (3,276 components)
Red Hat Enterprise Linux BaseOS (v. 9) · Red Hat Enterprise Linux BaseOS (v. 10) · Red Hat Enterprise Linux AppStream (v. 10) · Red Hat Enterprise Linux AppStream (v. 9) · Red Hat Enterprise Linux BaseOS EUS (v.9.4) · and others 50
Not affected
2 products (42 components) — because the vulnerable code is not present in the product
Red Hat Enterprise Linux 7 · Red Hat Enterprise Linux 6
Action required by CISAfederal deadline: 2026-05-15
"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Versions
Affected
Linux/Kernel >= 4.14.0 < 5.10.254; Linux/Kernel >= 5.11.0 < 5.15.204; Linux/Kernel >= 5.16.0 < 6.1.170; Linux/Kernel >= 6.2.0 < 6.6.137; Linux/Kernel >= 6.7.0 < 6.12.85; Linux/Kernel >= 6.13.0 < 6.18.22
Fixed in
Linux/Kernel 5.10.254; Linux/Kernel 5.15.204; Linux/Kernel 6.1.170; Linux/Kernel 6.6.137; Linux/Kernel 6.12.85; Linux/Kernel 6.18.22
Researched and written with AI from the vendor advisory and public analysis, with the sources above. Always confirm the fixed version in the official advisory before acting.
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Linux · Linuxpublic PoCs found — 279
githubgithub.com/tgies/copy-fail-c★ 434githubgithub.com/cozystack/copy-fail-blocker★ 31githubgithub.com/KaraZajac/DIRTYFAIL★ 23githubgithub.com/sgkdev/ptrace_may_dream★ 20githubgithub.com/Smarttfoxx/copyfail★ 20githubgithub.com/JuanBindez/CVE-2026-31431★ 14githubgithub.com/philfry/cve-2026-31431-ftrace★ 12githubgithub.com/ochebotar/copy-fail-CVE-2026-31431-detection-probe★ 10githubgithub.com/yandex-cloud-examples/yc-mk8s-copy-fail-mitigation★ 10githubgithub.com/4xura/CVE-2026-31431-Copy-Fail★ 6githubgithub.com/infiniroot/ansible-mitigate-copyfail-dirtyfrag★ 6githubgithub.com/samanzamani/copy-fail-checker★ 4githubgithub.com/Pithase/asm-copyfail★ 3githubgithub.com/lonelyor/CVE-2026-31431-exp★ 3githubgithub.com/guiimoraes/CVE-2026-31431★ 3githubgithub.com/Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail★ 3githubgithub.com/Koshmare-Blossom/Copyfail-sh★ 3githubgithub.com/bootsareme/copyfail-deconstructed★ 3githubgithub.com/haydenjames/CVE-2026-31431-check★ 3githubgithub.com/Aurillium/RootRemover★ 2githubgithub.com/waltrone1/copyfail-safe-check★ 2githubgithub.com/Iamliuxiaozhen/copy_fail★ 2githubgithub.com/adityasingh108/CVE-2026-31431-Metasploit-exploit★ 2githubgithub.com/krisiasty/vcheck★ 2githubgithub.com/juliosuas/copyfail-guard★ 2githubgithub.com/st4rburn/RootRemover★ 2githubgithub.com/rvzsec/CVE-2026-31431★ 2githubgithub.com/insomnisec/Detections-CVE-2026-31431★ 2githubgithub.com/4n4s4zi/copyfail-alpine★ 1githubgithub.com/gbonacini/CVE-2026-31431★ 1githubgithub.com/Sebastian294/cve-2026-31431★ 1githubgithub.com/OpenPixelSystems/c-copy-fail★ 1githubgithub.com/1neptune/CopyFail★ 1githubgithub.com/karollooool/Porting-CVE-2026-31431-Copy-Fail-to-a-Constrained-Java-Runner★ 1githubgithub.com/itsystem/afalg-check★ 1githubgithub.com/Juguitos/copy-fail★ 1githubgithub.com/gagaltotal/cve-2026-31431-copy-fail★ 1githubgithub.com/studiogangster/CVE-2026-31431★ 1githubgithub.com/dgrobinson0/CopyFile_CVE-2026-31431★ 1githubgithub.com/Lutfifakee-Project/CVE-2026-31431★ 1githubgithub.com/luoqianlin/copyfail-c★ 0githubgithub.com/vorkampfer/copy_fail_mitigation★ 0githubgithub.com/deckhouse/d8-copy-fail-mitigation★ 0githubgithub.com/HulnotHutu/CVE-2026-31431★ 0githubgithub.com/K3ysTr0K3R/CVE-2026-31431-EXPLOIT★ 0githubgithub.com/Morton-Li/copy-fail-CVE-2026-31431★ 0githubgithub.com/cleozi/Copy_Grail★ 0githubgithub.com/monobrau/copyfailscan★ 0githubgithub.com/suominen/CVE-2026-31431★ 0githubgithub.com/aexdyhaxor/CVE-2026-31431-copy-fail★ 0githubgithub.com/Liverwortenuresis371/copyfail-rs★ 0githubgithub.com/adilkurtulmus/linux-copy-fail-CVE-2026-31431★ 0githubgithub.com/Karim33z/CVE-2026-31431★ 0githubgithub.com/ROSNLR5/MitigationToolkit-ROSN-LR5-Full★ 0githubgithub.com/songzzzz/CVE-2026-31431★ 0githubgithub.com/vishvacyber/Detection-Tool-Kit-for-CVE-2026-31431★ 0githubgithub.com/tematemaru/CVE-2026-31431-simple-test★ 0githubgithub.com/t1ckprivate/CVE-2026-31431-Copy-Fail★ 0githubgithub.com/kinryulabs/rootpacket-cve-2026-31431★ 0githubgithub.com/SugiB3o/CVE-2026-31431★ 0githubgithub.com/1m1ssher/copy-fail-python★ 0githubgithub.com/Helios973/CVE-2026-31431_exp.c★ 0githubgithub.com/u1tr0nex/CVE-2026-31431-CopyFail-Lab★ 0githubgithub.com/hori0729/CVE-2026-31431-Verificador-Exploit★ 0githubgithub.com/jihwan77/Linux-Kernel-Copy-Fail-CVE-2026-31431-★ 0githubgithub.com/p401a-ops/Copy-Fail★ 0githubgithub.com/polyakovavv/copyfail★ 0githubgithub.com/tang-yikai/copy-fail-mitigation-with-bpftrace★ 0githubgithub.com/SilverRuler/copy-fail-CVE-2026-31431★ 0githubgithub.com/zKaaanon/ProyectoFinalSO★ 0githubgithub.com/zs1n/copy-fail-CVE-2026-31431★ 0githubgithub.com/abdelkabirouadoukou/CVE-2026-31431-Analysis-and-Fix★ 0githubgithub.com/julichaan/CVE-2026-31431-python-copyfail-POC★ 0githubgithub.com/Hunt-Benito/copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe★ 0githubgithub.com/mauricioportela/CVE-2026-31431-Analysis★ 0githubgithub.com/Mrhudson69/cve-2026-31431★ 0githubgithub.com/ikow/CVE-2026-31431-live-code-corruption★ 0githubgithub.com/Mr-bv/Copy-fail-CVE-2026-31431-Exploit-in-C★ 0githubgithub.com/vorkampfer/copyfail2_electric_boogaloo_fix★ 0githubgithub.com/hyz-is/copyfail-fix★ 0githubgithub.com/SystemVll/CVE-2026-31431-copyfail-aarch64★ 0githubgithub.com/DroPZsec/SplicePrivillegeEscalationFIX★ 0githubgithub.com/kuniyal08/Copy-Fail-CVE-2026-31431-Lab★ 0githubgithub.com/yangh-beep/CVE-2026-31431-C★ 0githubgithub.com/JimmyPughtron/CVE-2026-31431-Copy-Fail---Minified-LPE-PoC★ 0githubgithub.com/wh1sky02/copy-fail-python★ 0githubgithub.com/ridhinva/linux-kernel-algif-aead-checker★ 0githubgithub.com/sh4den/CVE-2026-31431-copyfail-aarch64★ 0githubgithub.com/0xFuffM3/CVE-2026-31431-CopyFail★ 0githubgithub.com/dotPY-hax/CopyFail★ 0githubgithub.com/Maxime288/CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention★ 0githubgithub.com/royayub/CVE-2026-31431★ 0githubgithub.com/Yakovyakov/cve-2026-31431-mitigation★ 0githubgithub.com/cj667113/OCI-Ansible-Fix-CVE-2026-31431★ 0githubgithub.com/GubiczaP/cve-2026-31431-checker★ 0githubgithub.com/OmerAti/almalinux-fix-cve-2026-31431★ 0githubgithub.com/ROSNLR5/modrosnlr5★ 0githubgithub.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284★ 0githubgithub.com/John-Popovici/CVE-2026-31431-CopyFail-Linux-PrivEsc★ 0githubgithub.com/ryan2929/CVE-2026-31431★ 0githubgithub.com/adampielak/CVE-2026-31431_SCA_WAZUH★ 0githubgithub.com/selectel/mks-copy-fail-mitigation★ 0vulncheckvulncheck.com/xdb/72fac779608bunverifiedvulncheckvulncheck.com/xdb/66ba94c6abcfunverifiedvulncheckvulncheck.com/xdb/4777718035edunverifiedvulncheckvulncheck.com/xdb/8adc8116b167unverifiedvulncheckvulncheck.com/xdb/d9502f3873ddunverifiedvulncheckvulncheck.com/xdb/0c18a2e65ff9unverifiedvulncheckvulncheck.com/xdb/0c8551d4d657unverifiedvulncheckvulncheck.com/xdb/a5ad9e692b5cunverifiedvulncheckvulncheck.com/xdb/ca2cd9e7077bunverifiedvulncheckvulncheck.com/xdb/b76ddd6c964eunverifiedvulncheckvulncheck.com/xdb/fdd7fa19f32bunverifiedvulncheckvulncheck.com/xdb/5f366e03c3f6unverifiedvulncheckvulncheck.com/xdb/c8112341a23aunverifiedvulncheckvulncheck.com/xdb/2301e0c020b4unverifiedvulncheckvulncheck.com/xdb/81835dda0c38unverifiedvulncheckvulncheck.com/xdb/d7d9e5b9fd16unverifiedvulncheckvulncheck.com/xdb/26ae8e310246unverifiedvulncheckvulncheck.com/xdb/cbbb8951ba6funverifiedvulncheckvulncheck.com/xdb/f28bcf69e8c5unverifiedvulncheckvulncheck.com/xdb/81e2219fb51funverifiedvulncheckvulncheck.com/xdb/2919864d2342unverifiedvulncheckvulncheck.com/xdb/5a97ebded855unverifiedvulncheckvulncheck.com/xdb/7bb49521c0feunverifiedvulncheckvulncheck.com/xdb/8be78296e330unverifiedvulncheckvulncheck.com/xdb/7559ee81de55unverifiedvulncheckvulncheck.com/xdb/7a46ec1a2cdfunverifiedvulncheckvulncheck.com/xdb/27e3e355e3edunverifiedvulncheckvulncheck.com/xdb/f5cbc3830b4bunverifiedvulncheckvulncheck.com/xdb/52dff7447042unverifiedvulncheckvulncheck.com/xdb/82678b24c229unverifiedvulncheckvulncheck.com/xdb/51384a253ee8unverifiedvulncheckvulncheck.com/xdb/3e94e36a8200unverifiedvulncheckvulncheck.com/xdb/6cdb93d7422aunverifiedvulncheckvulncheck.com/xdb/49a787f49e1funverifiedvulncheckvulncheck.com/xdb/5e770ec376e5unverifiedvulncheckvulncheck.com/xdb/ba9f92b0532aunverifiedvulncheckvulncheck.com/xdb/42d088b34c4aunverifiedvulncheckvulncheck.com/xdb/a7480893cc4aunverifiedvulncheckvulncheck.com/xdb/e019a0ad7709unverifiedvulncheckvulncheck.com/xdb/5ce5a6728fdbunverifiedvulncheckvulncheck.com/xdb/806397d1744dunverifiedvulncheckvulncheck.com/xdb/1aaefb624f3cunverifiedvulncheckvulncheck.com/xdb/95fbb448089bunverifiedvulncheckvulncheck.com/xdb/3e534ccda112unverifiedvulncheckvulncheck.com/xdb/9578e5d7370funverifiedvulncheckvulncheck.com/xdb/a1ed61b43658unverifiedvulncheckvulncheck.com/xdb/7c603ec28031unverifiedvulncheckvulncheck.com/xdb/3fc8c33cfed7unverifiedvulncheckvulncheck.com/xdb/087bdbd4d484unverifiedvulncheckvulncheck.com/xdb/d42248edb2beunverifiedvulncheckvulncheck.com/xdb/2999e0f30196unverifiedvulncheckvulncheck.com/xdb/f1f95ff6ea5aunverifiedvulncheckvulncheck.com/xdb/e0fbf0fb0b33unverifiedvulncheckvulncheck.com/xdb/904b4eade59eunverifiedvulncheckvulncheck.com/xdb/27b5c57ffa0bunverifiedvulncheckvulncheck.com/xdb/fdc3cefca634unverifiedvulncheckvulncheck.com/xdb/9f7c66e451f1unverifiedvulncheckvulncheck.com/xdb/ddb0f0a46323unverifiedvulncheckvulncheck.com/xdb/3ae800ee281dunverifiedvulncheckvulncheck.com/xdb/7ec336a3c0feunverifiedvulncheckvulncheck.com/xdb/9b3b53c42700unverifiedvulncheckvulncheck.com/xdb/b63bcc641b9funverifiedvulncheckvulncheck.com/xdb/b9fe99a594e2unverifiedvulncheckvulncheck.com/xdb/57899124a4d4unverifiedvulncheckvulncheck.com/xdb/5f4e8934338bunverifiedvulncheckvulncheck.com/xdb/219a113f77ddunverifiedvulncheckvulncheck.com/xdb/d4fcf068a14aunverifiedvulncheckvulncheck.com/xdb/85ba0f849f42unverifiedvulncheckvulncheck.com/xdb/525167cca95cunverifiedvulncheckvulncheck.com/xdb/8c50606c19f1unverifiedvulncheckvulncheck.com/xdb/eae26e697100unverifiedvulncheckvulncheck.com/xdb/39bbeddc2ee1unverifiedvulncheckvulncheck.com/xdb/02538ead1f6funverifiedvulncheckvulncheck.com/xdb/6ac73bbef175unverifiedvulncheckvulncheck.com/xdb/2a5fe12cfa62unverifiedvulncheckvulncheck.com/xdb/f1636e41839eunverifiedvulncheckvulncheck.com/xdb/9d371e69e91funverifiedvulncheckvulncheck.com/xdb/d16462fb35b3unverifiedvulncheckvulncheck.com/xdb/212a8b81b060unverifiedvulncheckvulncheck.com/xdb/21fe4fb5f902unverifiedcve_referencegithub.com/theori-io/copy-fail-CVE-2026-31431unverifiedvulncheckvulncheck.com/xdb/1194be99c34aunverifiedvulncheckvulncheck.com/xdb/0344acb15f6funverifiedvulncheckvulncheck.com/xdb/dfaebc9d85c3unverifiedvulncheckvulncheck.com/xdb/a6cb9f7846c0unverifiedvulncheckvulncheck.com/xdb/f258994f2af7unverifiedvulncheckvulncheck.com/xdb/ebd03654d442unverifiedvulncheckvulncheck.com/xdb/96df0a9d9b54unverifiedvulncheckvulncheck.com/xdb/aab9515af4edunverifiedvulncheckvulncheck.com/xdb/053326da627aunverifiedvulncheckvulncheck.com/xdb/083c8438764dunverifiedvulncheckvulncheck.com/xdb/96b9d0ab5052unverifiedvulncheckvulncheck.com/xdb/ab6a379a6c2eunverifiedvulncheckvulncheck.com/xdb/088f026f994dunverifiedvulncheckvulncheck.com/xdb/b80c5c277d12unverifiedvulncheckvulncheck.com/xdb/77484f693c3funverifiedvulncheckvulncheck.com/xdb/8d8075e702aeunverifiedvulncheckvulncheck.com/xdb/417e8d9024d2unverifiedvulncheckvulncheck.com/xdb/d9c62a99d699unverifiedvulncheckvulncheck.com/xdb/428a865efaaeunverifiedvulncheckvulncheck.com/xdb/d0672e30ff86unverifiedvulncheckvulncheck.com/xdb/2f3b35aa6f10unverifiedvulncheckvulncheck.com/xdb/63e9e85c5ca1unverifiedvulncheckvulncheck.com/xdb/ae1affad2f56unverifiedvulncheckvulncheck.com/xdb/355560e5c697unverifiedvulncheckvulncheck.com/xdb/9542cd3736b4unverifiedvulncheckvulncheck.com/xdb/1ba09dec0e2dunverifiedvulncheckvulncheck.com/xdb/206b72909d44unverifiedvulncheckvulncheck.com/xdb/9e7870d2a8b7unverifiedvulncheckvulncheck.com/xdb/697e0f5e15c1unverifiedvulncheckvulncheck.com/xdb/65f99cb91d24unverifiedvulncheckvulncheck.com/xdb/7d19ec4124d9unverifiedvulncheckvulncheck.com/xdb/59bbd1b8d099unverifiedvulncheckvulncheck.com/xdb/739156709f03unverifiedvulncheckvulncheck.com/xdb/eac74c2016bdunverifiedvulncheckvulncheck.com/xdb/bff693af86b2unverifiedvulncheckvulncheck.com/xdb/dcc0519bdf2bunverifiedvulncheckvulncheck.com/xdb/ed03078f1822unverifiedvulncheckvulncheck.com/xdb/ef7e08218bdaunverifiedvulncheckvulncheck.com/xdb/9f57f78ab452unverifiedvulncheckvulncheck.com/xdb/3b3c3a3ea186unverifiedvulncheckvulncheck.com/xdb/703f06e3c018unverifiedvulncheckvulncheck.com/xdb/ade7180e9557unverifiedvulncheckvulncheck.com/xdb/44a7b6391805unverifiedvulncheckvulncheck.com/xdb/54d226c7f008unverifiedvulncheckvulncheck.com/xdb/12744358431bunverifiedvulncheckvulncheck.com/xdb/6c106bfa50cdunverifiedvulncheckvulncheck.com/xdb/de170dcd14f2unverifiedvulncheckvulncheck.com/xdb/f9c61f50747funverifiedvulncheckvulncheck.com/xdb/1059b89979a4unverifiedvulncheckvulncheck.com/xdb/2fc63bc01976unverifiedvulncheckvulncheck.com/xdb/e6a221b796a5unverifiedvulncheckvulncheck.com/xdb/47af9fad8d91unverifiedvulncheckvulncheck.com/xdb/fa0caebac8e3unverifiedvulncheckvulncheck.com/xdb/95a835f6fd6eunverifiedvulncheckvulncheck.com/xdb/30a610846534unverifiedvulncheckvulncheck.com/xdb/7a83c969191eunverifiedvulncheckvulncheck.com/xdb/fe9d5dbd8811unverifiedvulncheckvulncheck.com/xdb/f0e03492d88bunverifiedvulncheckvulncheck.com/xdb/e7179d2b3535unverifiedvulncheckvulncheck.com/xdb/e7b9da2bdfb6unverifiedvulncheckvulncheck.com/xdb/776718970d58unverifiedvulncheckvulncheck.com/xdb/8d7730781617unverifiedvulncheckvulncheck.com/xdb/e705019c9e13unverifiedvulncheckvulncheck.com/xdb/8a5d1a43302funverifiedvulncheckvulncheck.com/xdb/b850aae1d2f1unverifiedvulncheckvulncheck.com/xdb/8a1dc931a413unverifiedvulncheckvulncheck.com/xdb/32f668d95a3cunverifiedvulncheckvulncheck.com/xdb/caa8401b276bunverifiedvulncheckvulncheck.com/xdb/e8975e72b657unverifiedvulncheckvulncheck.com/xdb/99d5a0c16d46unverifiedvulncheckvulncheck.com/xdb/f2fbcd319431unverifiedvulncheckvulncheck.com/xdb/8ed7e7e1dbecunverifiedvulncheckvulncheck.com/xdb/cc826e9b1f99unverifiedvulncheckvulncheck.com/xdb/d4547dedf534unverifiedvulncheckvulncheck.com/xdb/d4a8585cc780unverifiedvulncheckvulncheck.com/xdb/f5c84cdf7433unverifiedvulncheckvulncheck.com/xdb/27df7faa07e4unverifiedvulncheckvulncheck.com/xdb/63e44759a331unverifiedvulncheckvulncheck.com/xdb/ecf4fface764unverifiedvulncheckvulncheck.com/xdb/cefede57bd6cunverifiedvulncheckvulncheck.com/xdb/2c1919a6d661unverifiedvulncheckvulncheck.com/xdb/37fe9295faa5unverifiedvulncheckvulncheck.com/xdb/5f08c8cf2c82unverifiedvulncheckvulncheck.com/xdb/ccc93a4a7915unverifiedvulncheckvulncheck.com/xdb/61f15b9998c1unverifiedvulncheckvulncheck.com/xdb/bca5bbcafe9aunverifiedvulncheckvulncheck.com/xdb/f41522587b83unverifiedvulncheckvulncheck.com/xdb/5fb77f5461c1unverifiedvulncheckvulncheck.com/xdb/3f419354d220unverifiedvulncheckvulncheck.com/xdb/80e9f00159b6unverifiedvulncheckvulncheck.com/xdb/311f8d0dcd9cunverifiedvulncheckvulncheck.com/xdb/da62a0a3ed75unverifiedvulncheckvulncheck.com/xdb/c94927d951f6unverifiedvulncheckvulncheck.com/xdb/5eb405ef3e03unverifiedvulncheckvulncheck.com/xdb/c936a9810115unverifiedvulncheckvulncheck.com/xdb/671d4d334dc6unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://access.redhat.com/errata/RHSA-2026:13565https://access.redhat.com/errata/RHSA-2026:13566https://access.redhat.com/errata/RHSA-2026:13577https://access.redhat.com/errata/RHSA-2026:13578https://access.redhat.com/errata/RHSA-2026:13681https://access.redhat.com/errata/RHSA-2026:13690https://access.redhat.com/errata/RHSA-2026:13727https://access.redhat.com/errata/RHSA-2026:13729https://access.redhat.com/errata/RHSA-2026:13734https://access.redhat.com/errata/RHSA-2026:13811https://access.redhat.com/errata/RHSA-2026:13862https://access.redhat.com/errata/RHSA-2026:13885