The CVE-2026-31431 “Copy Fail” exploit affects nearly all recent Linux distributions, giving attackers with any level of access a way to grant themselves admin privileges without leaving a trail.
Nearly every Linux distribution released since 2017 is currently vulnerable to a security bug called “Copy Fail” that allows any user to give themselves administrator privileges.
The exploit, publicly disclosed as CVE-2026-31431 on Wednesday, uses a Python script that works across all of the vulnerable Linux distributions, requiring “no per-distro offsets, no version checks, no recompilation,” according to Theori, the security firm that uncovered it. Ars Technica points out this blog post where DevOps engineer Jorijn Schrijvershof explains that what makes Copy Fail “unusually nasty” is the likelihood for it to go unnoticed by monitoring tools: “Page-cache corruption never marks the page dirty.
The kernel’s writeback machinery never flushes the modified bytes back to disk. ” As a result, “AIDE, Tripwire, OSSEC and any monitoring tool that compares on-disk checksums see nothing. ” Copy Fail was identified by Theori’s researchers with assistance from their Xint Code AI tool. According to a blog post, Taeyang Lee had an idea of looking into the crypto subsystem of Linux and created this prompt to run an automated scan that identified several vulnerabilities in “about an hour.
” >“This is the linux crypto/ subsystem. Please examine all codepaths reachable from userspace syscalls. Note one key observation: splice can deliver page-cache references of read-only files to crypto TX scatterlists.
” According to the exploit’s disclosure page, a patch for Copy Fail was added to the mainline Linux kernel on April 1st. However, as Ars Technica notes, the researchers who identified Copy Fail published the details of the exploit publicly before all of the affected distributions could release patches for it. Some distros, including Arch Linux, RedHat Fedora, and Amazon Linux, have released patches, but many others were not immediately able to address the issue.
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Simple treatment tweak drastically reduces blood loss from severe cutsA procedure that could be done in half an hour, and prepared ahead of time, could seriously reduce blood loss from severe wounds, such as during surgery
Read more »
LeAnn Rimes cancels concerts due to severe illness, says she is 'truly heartbroken'Fox News Channel offers its audiences in-depth news reporting, along with opinion and analysis encompassing the principles of free people, free markets and diversity of thought, as an alternative to the left-of-center offerings of the news marketplace.
Read more »
Lost Copy of the Oldest-Known English Poem Discovered in a Rome LibraryThe discovery uncovers new insights into how English spread and evolved over time, the researchers say.
Read more »
Volla Phone runs Linux in a rugged shell and proves replaceable batteries are still doableTech Product Reviews, How To, Best Ofs, deals and Advice
Read more »
Wild parrots copy their friends when deciding whether to try new foods, study findsHuman children often copy their friends’ preferences for toys or clothes, while adults are prone to jumping on popular diets or lifestyle trends. Now it turns out that this sort of imitation is not unique to our species, as wild parrots learn to try new foods by copying their peers, a new study suggests.
Read more »
Dangerous New Linux Exploit Gives Attackers Root Access to Countless ComputersThe exploit, dubbed CopyFail and tracked as CVE-2026-31431, allows hackers to take over PCs and data center servers. The Linux vulnerabilities have been patched—but many machines remain at risk.
Read more »