TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

The Hacker News

New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions

[email protected] (The Hacker News) · 6 days ago · Read original ↗

ATT&CK techniques detected

3 predictions
T1068Exploitation for Privilege Escalation
96%
“new linux ' copy fail ' vulnerability enables root access on major distributions cybersecurity researchers have disclosed details of a linux local privilege escalation ( lpe ) flaw that could allow an unprivileged local user to obtain root. the high - severity vulnerability track…”
T1068Exploitation for Privilege Escalation
86%
“allows any user account, no matter how low - level, to increase their privilege to full admin access. it also allows them to bypass sandboxing and works across all linux versions and distributions. "”
T1068Exploitation for Privilege Escalation
76%
“page cache of read - only files and ultimately overwrite sensitive files on the system to achieve code execution. " copy fail is the same class of primitive, in a different subsystem, " bugcrowd ' s david brumley said. " the 2017 in - place optimization in algif _ aead allows a p…”

Summary

Cybersecurity researchers have disclosed details of a Linux local privilege escalation (LPE) flaw that could allow an unprivileged local user to obtain root. The high-severity vulnerability tracked as CVE-2026-31431 (CVSS score: 7.8) has been codenamed Copy Fail by Xint.io and Theori. "An unprivileged local user can write four controlled bytes into the page cache of any readable file on a Linux