crypto: algif_aead - Revert to operating out-of-place
100Vexday Risk Score
Corrija agora. Ela está sob exploração confirmada pelo CISA e tem exploit funcional público.
ssvc Actcvss 7.8epss 100%
da publicação à arma0 dias
Publicada no NVD22 de abr.
1ª PoC8 de mar.
metasploit+7d
CISA KEV+9d
probabilidade de exploração
100%top 1% das CVEs
exploração observada
simCISA + VulnCheck
276 exploit(s) público(s)
Ação exigida pela CISAprazo federal: 2026-05-15
"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Versões
Afetadas
Linux/Kernel >= 4.14.0 < 5.10.254; Linux/Kernel >= 5.11.0 < 5.15.204; Linux/Kernel >= 5.16.0 < 6.1.170; Linux/Kernel >= 6.2.0 < 6.6.137; Linux/Kernel >= 6.7.0 < 6.12.85; Linux/Kernel >= 6.13.0 < 6.18.22
Corrigidas em
Linux/Kernel 5.10.254; Linux/Kernel 5.15.204; Linux/Kernel 6.1.170; Linux/Kernel 6.6.137; Linux/Kernel 6.12.85; Linux/Kernel 6.18.22
Pesquisado e redigido com IA a partir do advisory do fornecedor e de análises públicas, com as fontes acima. Confira sempre a versão corrigida no advisory oficial antes de agir.
In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Linux · LinuxPoCs públicas encontradas — 276
githubgithub.com/tgies/copy-fail-c★ 434githubgithub.com/cozystack/copy-fail-blocker★ 31githubgithub.com/KaraZajac/DIRTYFAIL★ 23githubgithub.com/Smarttfoxx/copyfail★ 20githubgithub.com/sgkdev/ptrace_may_dream★ 20githubgithub.com/JuanBindez/CVE-2026-31431★ 14githubgithub.com/philfry/cve-2026-31431-ftrace★ 12githubgithub.com/ochebotar/copy-fail-CVE-2026-31431-detection-probe★ 10githubgithub.com/yandex-cloud-examples/yc-mk8s-copy-fail-mitigation★ 10githubgithub.com/4xura/CVE-2026-31431-Copy-Fail★ 6githubgithub.com/infiniroot/ansible-mitigate-copyfail-dirtyfrag★ 6githubgithub.com/samanzamani/copy-fail-checker★ 4githubgithub.com/Koshmare-Blossom/Copyfail-sh★ 3githubgithub.com/haydenjames/CVE-2026-31431-check★ 3githubgithub.com/guiimoraes/CVE-2026-31431★ 3githubgithub.com/Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail★ 3githubgithub.com/lonelyor/CVE-2026-31431-exp★ 3githubgithub.com/Pithase/asm-copyfail★ 3githubgithub.com/bootsareme/copyfail-deconstructed★ 3githubgithub.com/juliosuas/copyfail-guard★ 2githubgithub.com/krisiasty/vcheck★ 2githubgithub.com/Iamliuxiaozhen/copy_fail★ 2githubgithub.com/st4rburn/RootRemover★ 2githubgithub.com/rvzsec/CVE-2026-31431★ 2githubgithub.com/adityasingh108/CVE-2026-31431-Metasploit-exploit★ 2githubgithub.com/waltrone1/copyfail-safe-check★ 2githubgithub.com/insomnisec/Detections-CVE-2026-31431★ 2githubgithub.com/Aurillium/RootRemover★ 2githubgithub.com/Lutfifakee-Project/CVE-2026-31431★ 1githubgithub.com/studiogangster/CVE-2026-31431★ 1githubgithub.com/4n4s4zi/copyfail-alpine★ 1githubgithub.com/Sebastian294/cve-2026-31431★ 1githubgithub.com/itsystem/afalg-check★ 1githubgithub.com/OpenPixelSystems/c-copy-fail★ 1githubgithub.com/dgrobinson0/CopyFile_CVE-2026-31431★ 1githubgithub.com/gbonacini/CVE-2026-31431★ 1githubgithub.com/1neptune/CopyFail★ 1githubgithub.com/gagaltotal/cve-2026-31431-copy-fail★ 1githubgithub.com/karollooool/Porting-CVE-2026-31431-Copy-Fail-to-a-Constrained-Java-Runner★ 1githubgithub.com/Juguitos/copy-fail★ 1githubgithub.com/DroPZsec/SplicePrivillegeEscalationFIX★ 0githubgithub.com/tang-yikai/copy-fail-mitigation-with-bpftrace★ 0githubgithub.com/abdelkabirouadoukou/CVE-2026-31431-Analysis-and-Fix★ 0githubgithub.com/julichaan/CVE-2026-31431-python-copyfail-POC★ 0githubgithub.com/p401a-ops/Copy-Fail★ 0githubgithub.com/polyakovavv/copyfail★ 0githubgithub.com/SilverRuler/copy-fail-CVE-2026-31431★ 0githubgithub.com/zKaaanon/ProyectoFinalSO★ 0githubgithub.com/zs1n/copy-fail-CVE-2026-31431★ 0githubgithub.com/Hunt-Benito/copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe★ 0githubgithub.com/mauricioportela/CVE-2026-31431-Analysis★ 0githubgithub.com/Mrhudson69/cve-2026-31431★ 0githubgithub.com/ikow/CVE-2026-31431-live-code-corruption★ 0githubgithub.com/Mr-bv/Copy-fail-CVE-2026-31431-Exploit-in-C★ 0githubgithub.com/vorkampfer/copyfail2_electric_boogaloo_fix★ 0githubgithub.com/hyz-is/copyfail-fix★ 0githubgithub.com/SystemVll/CVE-2026-31431-copyfail-aarch64★ 0githubgithub.com/kuniyal08/Copy-Fail-CVE-2026-31431-Lab★ 0githubgithub.com/yangh-beep/CVE-2026-31431-C★ 0githubgithub.com/JimmyPughtron/CVE-2026-31431-Copy-Fail---Minified-LPE-PoC★ 0githubgithub.com/wh1sky02/copy-fail-python★ 0githubgithub.com/ridhinva/linux-kernel-algif-aead-checker★ 0githubgithub.com/sh4den/CVE-2026-31431-copyfail-aarch64★ 0githubgithub.com/0xFuffM3/CVE-2026-31431-CopyFail★ 0githubgithub.com/dotPY-hax/CopyFail★ 0githubgithub.com/Maxime288/CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention★ 0githubgithub.com/royayub/CVE-2026-31431★ 0githubgithub.com/Yakovyakov/cve-2026-31431-mitigation★ 0githubgithub.com/cj667113/OCI-Ansible-Fix-CVE-2026-31431★ 0githubgithub.com/GubiczaP/cve-2026-31431-checker★ 0githubgithub.com/OmerAti/almalinux-fix-cve-2026-31431★ 0githubgithub.com/ROSNLR5/modrosnlr5★ 0githubgithub.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284★ 0githubgithub.com/ROSNLR5/MitigationToolkit-ROSN-LR5-Full★ 0githubgithub.com/hori0729/CVE-2026-31431-Verificador-Exploit★ 0githubgithub.com/jihwan77/Linux-Kernel-Copy-Fail-CVE-2026-31431-★ 0githubgithub.com/John-Popovici/CVE-2026-31431-CopyFail-Linux-PrivEsc★ 0githubgithub.com/ryan2929/CVE-2026-31431★ 0githubgithub.com/adampielak/CVE-2026-31431_SCA_WAZUH★ 0githubgithub.com/selectel/mks-copy-fail-mitigation★ 0githubgithub.com/luoqianlin/copyfail-c★ 0githubgithub.com/vorkampfer/copy_fail_mitigation★ 0githubgithub.com/deckhouse/d8-copy-fail-mitigation★ 0githubgithub.com/HulnotHutu/CVE-2026-31431★ 0githubgithub.com/K3ysTr0K3R/CVE-2026-31431-EXPLOIT★ 0githubgithub.com/Morton-Li/copy-fail-CVE-2026-31431★ 0githubgithub.com/cleozi/Copy_Grail★ 0githubgithub.com/monobrau/copyfailscan★ 0githubgithub.com/suominen/CVE-2026-31431★ 0githubgithub.com/aexdyhaxor/CVE-2026-31431-copy-fail★ 0githubgithub.com/Liverwortenuresis371/copyfail-rs★ 0githubgithub.com/adilkurtulmus/linux-copy-fail-CVE-2026-31431★ 0githubgithub.com/Karim33z/CVE-2026-31431★ 0githubgithub.com/u1tr0nex/CVE-2026-31431-CopyFail-Lab★ 0githubgithub.com/songzzzz/CVE-2026-31431★ 0githubgithub.com/vishvacyber/Detection-Tool-Kit-for-CVE-2026-31431★ 0githubgithub.com/tematemaru/CVE-2026-31431-simple-test★ 0githubgithub.com/t1ckprivate/CVE-2026-31431-Copy-Fail★ 0githubgithub.com/kinryulabs/rootpacket-cve-2026-31431★ 0githubgithub.com/SugiB3o/CVE-2026-31431★ 0githubgithub.com/1m1ssher/copy-fail-python★ 0githubgithub.com/Helios973/CVE-2026-31431_exp.c★ 0vulncheckvulncheck.com/xdb/703f06e3c018não verificadovulncheckvulncheck.com/xdb/ade7180e9557não verificadovulncheckvulncheck.com/xdb/44a7b6391805não verificadovulncheckvulncheck.com/xdb/54d226c7f008não verificadovulncheckvulncheck.com/xdb/12744358431bnão verificadovulncheckvulncheck.com/xdb/6c106bfa50cdnão verificadovulncheckvulncheck.com/xdb/de170dcd14f2não verificadovulncheckvulncheck.com/xdb/f9c61f50747fnão verificadovulncheckvulncheck.com/xdb/1059b89979a4não verificadovulncheckvulncheck.com/xdb/2fc63bc01976não verificadovulncheckvulncheck.com/xdb/e6a221b796a5não verificadovulncheckvulncheck.com/xdb/47af9fad8d91não verificadovulncheckvulncheck.com/xdb/fa0caebac8e3não verificadovulncheckvulncheck.com/xdb/95a835f6fd6enão verificadovulncheckvulncheck.com/xdb/30a610846534não verificadovulncheckvulncheck.com/xdb/7a83c969191enão verificadovulncheckvulncheck.com/xdb/fe9d5dbd8811não verificadovulncheckvulncheck.com/xdb/f0e03492d88bnão verificadovulncheckvulncheck.com/xdb/e7179d2b3535não verificadovulncheckvulncheck.com/xdb/e7b9da2bdfb6não verificadovulncheckvulncheck.com/xdb/776718970d58não verificadovulncheckvulncheck.com/xdb/8d7730781617não verificadovulncheckvulncheck.com/xdb/e705019c9e13não verificadovulncheckvulncheck.com/xdb/8a5d1a43302fnão verificadovulncheckvulncheck.com/xdb/b850aae1d2f1não verificadovulncheckvulncheck.com/xdb/8a1dc931a413não verificadovulncheckvulncheck.com/xdb/32f668d95a3cnão verificadovulncheckvulncheck.com/xdb/caa8401b276bnão verificadovulncheckvulncheck.com/xdb/e8975e72b657não verificadovulncheckvulncheck.com/xdb/99d5a0c16d46não verificadovulncheckvulncheck.com/xdb/f2fbcd319431não verificadovulncheckvulncheck.com/xdb/8ed7e7e1dbecnão verificadovulncheckvulncheck.com/xdb/cc826e9b1f99não verificadovulncheckvulncheck.com/xdb/d4547dedf534não verificadovulncheckvulncheck.com/xdb/d4a8585cc780não verificadovulncheckvulncheck.com/xdb/f5c84cdf7433não verificadovulncheckvulncheck.com/xdb/27df7faa07e4não verificadovulncheckvulncheck.com/xdb/63e44759a331não verificadovulncheckvulncheck.com/xdb/ecf4fface764não verificadovulncheckvulncheck.com/xdb/cefede57bd6cnão verificadovulncheckvulncheck.com/xdb/2c1919a6d661não verificadovulncheckvulncheck.com/xdb/37fe9295faa5não verificadovulncheckvulncheck.com/xdb/5f08c8cf2c82não verificadovulncheckvulncheck.com/xdb/ccc93a4a7915não verificadovulncheckvulncheck.com/xdb/61f15b9998c1não verificadovulncheckvulncheck.com/xdb/bca5bbcafe9anão verificadovulncheckvulncheck.com/xdb/f41522587b83não verificadovulncheckvulncheck.com/xdb/5fb77f5461c1não verificadovulncheckvulncheck.com/xdb/3f419354d220não verificadovulncheckvulncheck.com/xdb/80e9f00159b6não verificadovulncheckvulncheck.com/xdb/311f8d0dcd9cnão verificadovulncheckvulncheck.com/xdb/da62a0a3ed75não verificadovulncheckvulncheck.com/xdb/c94927d951f6não verificadovulncheckvulncheck.com/xdb/5eb405ef3e03não verificadovulncheckvulncheck.com/xdb/c936a9810115não verificadovulncheckvulncheck.com/xdb/671d4d334dc6não verificadovulncheckvulncheck.com/xdb/72fac779608bnão verificadovulncheckvulncheck.com/xdb/66ba94c6abcfnão verificadovulncheckvulncheck.com/xdb/4777718035ednão verificadovulncheckvulncheck.com/xdb/8adc8116b167não verificadovulncheckvulncheck.com/xdb/d9502f3873ddnão verificadovulncheckvulncheck.com/xdb/0c18a2e65ff9não verificadovulncheckvulncheck.com/xdb/0c8551d4d657não verificadovulncheckvulncheck.com/xdb/a5ad9e692b5cnão verificadovulncheckvulncheck.com/xdb/ca2cd9e7077bnão verificadovulncheckvulncheck.com/xdb/b76ddd6c964enão verificadovulncheckvulncheck.com/xdb/fdd7fa19f32bnão verificadovulncheckvulncheck.com/xdb/5f366e03c3f6não verificadovulncheckvulncheck.com/xdb/c8112341a23anão verificadovulncheckvulncheck.com/xdb/2301e0c020b4não verificadovulncheckvulncheck.com/xdb/81835dda0c38não verificadovulncheckvulncheck.com/xdb/d7d9e5b9fd16não verificadovulncheckvulncheck.com/xdb/26ae8e310246não verificadovulncheckvulncheck.com/xdb/cbbb8951ba6fnão verificadovulncheckvulncheck.com/xdb/f28bcf69e8c5não verificadovulncheckvulncheck.com/xdb/81e2219fb51fnão verificadovulncheckvulncheck.com/xdb/2919864d2342não verificadovulncheckvulncheck.com/xdb/5a97ebded855não verificadovulncheckvulncheck.com/xdb/7bb49521c0fenão verificadovulncheckvulncheck.com/xdb/8be78296e330não verificadovulncheckvulncheck.com/xdb/7559ee81de55não verificadovulncheckvulncheck.com/xdb/7a46ec1a2cdfnão verificadovulncheckvulncheck.com/xdb/27e3e355e3ednão verificadovulncheckvulncheck.com/xdb/f5cbc3830b4bnão verificadovulncheckvulncheck.com/xdb/52dff7447042não verificadovulncheckvulncheck.com/xdb/82678b24c229não verificadovulncheckvulncheck.com/xdb/51384a253ee8não verificadovulncheckvulncheck.com/xdb/3e94e36a8200não verificadovulncheckvulncheck.com/xdb/6cdb93d7422anão verificadovulncheckvulncheck.com/xdb/49a787f49e1fnão verificadovulncheckvulncheck.com/xdb/5e770ec376e5não verificadovulncheckvulncheck.com/xdb/ba9f92b0532anão verificadovulncheckvulncheck.com/xdb/42d088b34c4anão verificadovulncheckvulncheck.com/xdb/a7480893cc4anão verificadovulncheckvulncheck.com/xdb/e019a0ad7709não verificadovulncheckvulncheck.com/xdb/5ce5a6728fdbnão verificadovulncheckvulncheck.com/xdb/806397d1744dnão verificadovulncheckvulncheck.com/xdb/1aaefb624f3cnão verificadovulncheckvulncheck.com/xdb/95fbb448089bnão verificadovulncheckvulncheck.com/xdb/3e534ccda112não verificadovulncheckvulncheck.com/xdb/9578e5d7370fnão verificadovulncheckvulncheck.com/xdb/a1ed61b43658não verificadovulncheckvulncheck.com/xdb/7c603ec28031não verificadovulncheckvulncheck.com/xdb/3fc8c33cfed7não verificadovulncheckvulncheck.com/xdb/087bdbd4d484não verificadovulncheckvulncheck.com/xdb/d42248edb2benão verificadovulncheckvulncheck.com/xdb/2999e0f30196não verificadovulncheckvulncheck.com/xdb/f1f95ff6ea5anão verificadovulncheckvulncheck.com/xdb/e0fbf0fb0b33não verificadovulncheckvulncheck.com/xdb/904b4eade59enão verificadovulncheckvulncheck.com/xdb/27b5c57ffa0bnão verificadovulncheckvulncheck.com/xdb/fdc3cefca634não verificadovulncheckvulncheck.com/xdb/9f7c66e451f1não verificadovulncheckvulncheck.com/xdb/ddb0f0a46323não verificadovulncheckvulncheck.com/xdb/3ae800ee281dnão verificadovulncheckvulncheck.com/xdb/7ec336a3c0fenão verificadovulncheckvulncheck.com/xdb/9b3b53c42700não verificadovulncheckvulncheck.com/xdb/b63bcc641b9fnão verificadovulncheckvulncheck.com/xdb/b9fe99a594e2não verificadovulncheckvulncheck.com/xdb/57899124a4d4não verificadovulncheckvulncheck.com/xdb/5f4e8934338bnão verificadovulncheckvulncheck.com/xdb/219a113f77ddnão verificadovulncheckvulncheck.com/xdb/d4fcf068a14anão verificadovulncheckvulncheck.com/xdb/85ba0f849f42não verificadovulncheckvulncheck.com/xdb/525167cca95cnão verificadovulncheckvulncheck.com/xdb/8c50606c19f1não verificadovulncheckvulncheck.com/xdb/eae26e697100não verificadovulncheckvulncheck.com/xdb/39bbeddc2ee1não verificadovulncheckvulncheck.com/xdb/02538ead1f6fnão verificadovulncheckvulncheck.com/xdb/6ac73bbef175não verificadovulncheckvulncheck.com/xdb/2a5fe12cfa62não verificadovulncheckvulncheck.com/xdb/ebd03654d442não verificadovulncheckvulncheck.com/xdb/b80c5c277d12não verificadovulncheckvulncheck.com/xdb/088f026f994dnão verificadovulncheckvulncheck.com/xdb/0344acb15f6fnão verificadovulncheckvulncheck.com/xdb/ab6a379a6c2enão verificadovulncheckvulncheck.com/xdb/96b9d0ab5052não verificadovulncheckvulncheck.com/xdb/21fe4fb5f902não verificadovulncheckvulncheck.com/xdb/083c8438764dnão verificadovulncheckvulncheck.com/xdb/053326da627anão verificadovulncheckvulncheck.com/xdb/f258994f2af7não verificadovulncheckvulncheck.com/xdb/aab9515af4ednão verificadovulncheckvulncheck.com/xdb/1194be99c34anão verificadocve_referencegithub.com/theori-io/copy-fail-CVE-2026-31431não verificadovulncheckvulncheck.com/xdb/96df0a9d9b54não verificadovulncheckvulncheck.com/xdb/9d371e69e91fnão verificadovulncheckvulncheck.com/xdb/a6cb9f7846c0não verificadovulncheckvulncheck.com/xdb/dfaebc9d85c3não verificadovulncheckvulncheck.com/xdb/77484f693c3fnão verificadovulncheckvulncheck.com/xdb/8d8075e702aenão verificadovulncheckvulncheck.com/xdb/417e8d9024d2não verificadovulncheckvulncheck.com/xdb/d9c62a99d699não verificadovulncheckvulncheck.com/xdb/428a865efaaenão verificadovulncheckvulncheck.com/xdb/d0672e30ff86não verificadovulncheckvulncheck.com/xdb/2f3b35aa6f10não verificadovulncheckvulncheck.com/xdb/63e9e85c5ca1não verificadovulncheckvulncheck.com/xdb/ae1affad2f56não verificadovulncheckvulncheck.com/xdb/355560e5c697não verificadovulncheckvulncheck.com/xdb/9542cd3736b4não verificadovulncheckvulncheck.com/xdb/1ba09dec0e2dnão verificadovulncheckvulncheck.com/xdb/206b72909d44não verificadovulncheckvulncheck.com/xdb/9e7870d2a8b7não verificadovulncheckvulncheck.com/xdb/697e0f5e15c1não verificadovulncheckvulncheck.com/xdb/65f99cb91d24não verificadovulncheckvulncheck.com/xdb/7d19ec4124d9não verificadovulncheckvulncheck.com/xdb/59bbd1b8d099não verificadovulncheckvulncheck.com/xdb/739156709f03não verificadovulncheckvulncheck.com/xdb/eac74c2016bdnão verificadovulncheckvulncheck.com/xdb/bff693af86b2não verificadovulncheckvulncheck.com/xdb/dcc0519bdf2bnão verificadovulncheckvulncheck.com/xdb/ed03078f1822não verificadovulncheckvulncheck.com/xdb/ef7e08218bdanão verificadovulncheckvulncheck.com/xdb/9f57f78ab452não verificadovulncheckvulncheck.com/xdb/3b3c3a3ea186não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://access.redhat.com/errata/RHSA-2026:13565https://access.redhat.com/errata/RHSA-2026:13566https://access.redhat.com/errata/RHSA-2026:13577https://access.redhat.com/errata/RHSA-2026:13578https://access.redhat.com/errata/RHSA-2026:13681https://access.redhat.com/errata/RHSA-2026:13690https://access.redhat.com/errata/RHSA-2026:13727https://access.redhat.com/errata/RHSA-2026:13729https://access.redhat.com/errata/RHSA-2026:13734https://access.redhat.com/errata/RHSA-2026:13811https://access.redhat.com/errata/RHSA-2026:13862https://access.redhat.com/errata/RHSA-2026:13885