Research

Copy Fail: Universal Linux Local Privilege Escalation Vulnerability

Detect and mitigate Copy Fail (CVE-2026-31431), an easily exploitable vulnerability in the Linux kernel that allows escalation from an unprivileged local user account to root access.

Read at Wiz Research

Vendor

Linux kernel

Product

Linux kernel

Exposure class

Operating system

• Wiz Research (wiz.io)
• CVE-2026-31431 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 26
   CISA advisory CISA 22 Sep 2026

   Siemens SIPLUS and SIMATIC Products

   CVSS 3.1 Fix available CVE-2026-31431 Siemens
2. 32
   CISA advisory CISA 17 Sep 2026

   ABB Ability Edgenius

   CVSS 3.1 Fix available CVE-2026-31431 Linux kernel ABB
3. 34
   Research Elastic Security Labs 11 Sep 2026

   Linux Detection Engineering - Local Privilege Escalation

   PoC public EPSS 0.16 CVE-2026-64600CVE-2026-31431CVE-2026-43284+8 more
4. 32
   CISA advisory CISA 14 Jul 2026

   ABB Ability Edgenius

   CVSS 3.1 Fix available CVE-2026-31431 Linux kernel ABB
5. 51
   CISA advisory CISA 23 Jun 2026

   Impact of Linux Kernel vulnerabilities on B&R products

   PoC public CVSS 3.1 EPSS 0.16 CVE-2026-31431CVE-2026-43284CVE-2026-46333+2 more Linux kernel ABB
6. 33
   Research Datadog Security Labs 28 May 2026

   From Exploit Code to Production Detection: Building a CVE-2026-31431 (Copy Fail) detection with Agents

   PoC public CVE-2026-31431 Datadog
7. 24
   Advisory Fortinet PSIRT 13 May 2026

   Linux Kernel Vulnerability copy.fail - CVE-2026-31431

   CVSS 3.0 Fix available CVE-2026-31431 Fortinet Linux kernel
8. 27
   Research Elastic Security Labs 9 May 2026

   Copy Fail and DirtyFrag: Linux Page Cache Bugs in the Wild

   CVE-2026-31431 Linux kernel Elastic