theori-io/copy-fail-CVE-2026-31431

Health v2 · maintenance only

Flags: no_releases young no_license

Adoption not part of the score

4049 stars · 910 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A proof-of-concept exploit for CVE-2026-31431, a Linux kernel local privilege escalation bug in the authencesn cryptographic template that allows a 4-byte page cache write. A 732-byte Python script corrupts a setuid binary's page cache to gain root on major Linux distributions.

Use cases

• test if my Linux kernel is vulnerable to CVE-2026-31431
• demonstrate a local privilege escalation on Ubuntu or RHEL
• study a page cache corruption kernel exploit
• verify patching of the authencesn crypto template bug
• learn how AF_ALG and splice can be chained for exploitation
• reproduce a kernel LPE in a lab environment

When to choose

• you need to validate whether your Linux hosts are exposed to CVE-2026-31431
• you are a security researcher studying kernel page cache exploits
• you are testing remediation in a controlled lab

When to avoid

• you want a defensive scanning tool rather than an exploit PoC
• you are not authorized to test the target system
• you need a production-hardened tool with a license and support

Facets

cli-tool · maturity active

security penetration-testing vulnerability-scanning security operating-systems python cli cve-2026-31431 lpe privilege-escalation linux-kernel exploit poc security-research page-cache kernel-exploit linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="theori-io/copy-fail-CVE-2026-31431")