vulnerability
Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years
Critical
Summary
A critical Linux kernel vulnerability, dubbed 'Copy Fail' (CVE-2026-31431), has been discovered allowing unprivileged local attackers to escalate their access to root across numerous Linux distributions since 2017. The flaw stems from a deterministic logic error within the kernel's cryptographic subsystem, specifically related to the authencesn algorithm and AEAD support. This vulnerability poses a significant risk to systems running vulnerable kernels, enabling attackers to compromise Kubernetes containers, multi-tenant hosts, and CI/CD pipelines.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data