logo

Linux CVE-2026-31431 "Copy Fail" LPE Enables Stealthy Root Access, Container Escape

ID: 22600273-4f6a-5811-a952-654796ee4ca0

STIX ID: report--22600273-4f6a-5811-a952-654796ee4ca0

Feed Name: Kudelski Security

Threat Score
75/100

Date Published: 2026-05-01

Date Updated: 2026-10-13

...
...

CVE-2026-31431 ("Copy Fail") is a high-severity Linux kernel local privilege escalation vulnerability (CVSS 7.8) that permits an unprivileged user to write four controlled bytes into the page cache of readable files, enabling root escalation and container-to-host escapes; it affects kernels back to 4.14 (since 2017) with multiple fixed releases listed and active public proofs-of-concept, and the advisory recommends immediate patching to vendor-supplied fixed kernels, rebooting, or temporarily blacklisting the algif_aead module as mitigation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.