jon/CVE-2026-31431-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added code and mitigation and checks

Browse Source
This commit is contained in:
Jon
2026-04-30 16:13:24 +01:00
parent ae24c7cf67
commit 30a62dffce
4 changed files with 42 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
README.md
View File

@@ -0,0 +1,25 @@
# Copy Fail - CVE-2026-31431
[Technical Writeup](https://xint.io/blog/copy-fail-linux-distributions)
## Tested Distro / Version
| Distro | Version |
|-------------------|-------------------------|
| Ubuntu 24.04 LTS | 6.17.0-1007-aws |
| Amazon Linux 2023 | 6.18.8-9.213.amzn2023 |
| RHEL 10.1 | 6.12.0-124.45.1.el10_1 |
| SUSE 16 | 6.12.0-160000.9-default |
| Rocky Linux 9.7 (Blue Onyx) | 5.14.0-611.49.1.el9_7.x86_64 |
## Files
check.sh - makes a check to see if the exploitable crypto module is loaded.
mitigate.sh - unloads the exploitable crypto module, chances are you didnt need it anyway.
copy_fail_exp.py - the exploit in pure python.
run to get the file as a non-privilaged user.
curl https://copy.fail/exp