nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity
Files
d1e82ef91e27cc2bfa782054ce72a7b626389cc1
PoC-in-GitHub/2026/CVE-2026-31431.json
T

11158 lines
394 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
[
{
"id": 1176158184,
"name": "CVE-2026-31431-CopyFail-Linux-PrivEsc",
"full_name": "John-Popovici\/CVE-2026-31431-CopyFail-Linux-PrivEsc",
"owner": {
"login": "John-Popovici",
"id": 57932172,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57932172?v=4",
"html_url": "https:\/\/github.com\/John-Popovici",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/John-Popovici\/CVE-2026-31431-CopyFail-Linux-PrivEsc",
"description": "A demo and explanation of CVE-2026-31431",
"fork": false,
"created_at": "2026-03-08T17:40:11Z",
"updated_at": "2026-10-13T11:33:31Z",
"pushed_at": "2026-10-13T11:33:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1224571990,
"name": "copy-fail-CVE-2026-31431",
"full_name": "theori-io\/copy-fail-CVE-2026-31431",
"owner": {
"login": "theori-io",
"id": 18063559,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18063559?v=4",
"html_url": "https:\/\/github.com\/theori-io",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/theori-io\/copy-fail-CVE-2026-31431",
"description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code",
"fork": false,
"created_at": "2026-04-29T12:15:28Z",
"updated_at": "2026-11-07T03:07:18Z",
"pushed_at": "2026-04-29T21:21:46Z",
"stargazers_count": 4083,
"watchers_count": 4083,
"has_discussions": false,
"forks_count": 904,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"ai-security",
"cve-2026-31431",
"exploit",
"linux-kernel",
"privilege-escalation",
"privilege-escalation-exploits",
"security-research",
"theori",
"vulnerability",
"xint-code"
],
"visibility": "public",
"forks": 904,
"watchers": 4083,
"score": 0,
"subscribers_count": 33
},
{
"id": 1224986082,
"name": "CVE-2026-31431",
"full_name": "Alfredooe\/CVE-2026-31431",
"owner": {
"login": "Alfredooe",
"id": 68240493,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68240493?v=4",
"html_url": "https:\/\/github.com\/Alfredooe",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Alfredooe\/CVE-2026-31431",
"description": "Golang implementation of CopyFail CVE-2026-31431",
"fork": false,
"created_at": "2026-04-29T20:41:01Z",
"updated_at": "2026-05-16T14:52:33Z",
"pushed_at": "2026-04-29T21:02:59Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225003339,
"name": "Copy-Fail-Exploit-CVE-2026-31431",
"full_name": "painoob\/Copy-Fail-Exploit-CVE-2026-31431",
"owner": {
"login": "painoob",
"id": 8389015,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8389015?v=4",
"html_url": "https:\/\/github.com\/painoob",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/painoob\/Copy-Fail-Exploit-CVE-2026-31431",
"description": "Most Linux LPEs need a race window or a kernel-specific offset. Copy Fail is a straight-line logic flaw, it needs neither. The same 732-byte Python script (or .c elf) roots every Linux distribution shipped since 2017.",
"fork": false,
"created_at": "2026-04-29T21:08:42Z",
"updated_at": "2026-11-01T19:08:22Z",
"pushed_at": "2026-04-29T21:22:27Z",
"stargazers_count": 111,
"watchers_count": 111,
"has_discussions": false,
"forks_count": 23,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": false,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 23,
"watchers": 111,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225057823,
"name": "copyfail-go",
"full_name": "badsectorlabs\/copyfail-go",
"owner": {
"login": "badsectorlabs",
"id": 43366550,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43366550?v=4",
"html_url": "https:\/\/github.com\/badsectorlabs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/badsectorlabs\/copyfail-go",
"description": "A Go implementation of copyfail (CVE-2026-31431)",
"fork": false,
"created_at": "2026-04-29T22:51:24Z",
"updated_at": "2026-10-16T09:45:01Z",
"pushed_at": "2026-05-01T03:24:14Z",
"stargazers_count": 360,
"watchers_count": 360,
"has_discussions": false,
"forks_count": 76,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 76,
"watchers": 360,
"score": 0,
"subscribers_count": 1
},
{
"id": 1225075622,
"name": "copy-fail-c",
"full_name": "tgies\/copy-fail-c",
"owner": {
"login": "tgies",
"id": 1594352,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1594352?v=4",
"html_url": "https:\/\/github.com\/tgies",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tgies\/copy-fail-c",
"description": "Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori \/ Xint.",
"fork": false,
"created_at": "2026-04-29T23:29:14Z",
"updated_at": "2026-10-31T05:35:28Z",
"pushed_at": "2026-07-17T13:24:28Z",
"stargazers_count": 448,
"watchers_count": 448,
"has_discussions": true,
"forks_count": 118,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"af-alg",
"copy-fail",
"cve-2026-31431",
"exploit",
"kernel-exploit",
"linux-kernel",
"local-privilege-escalation",
"nolibc",
"portable-c",
"privilege-escalation",
"proof-of-concept",
"security-research"
],
"visibility": "public",
"forks": 118,
"watchers": 448,
"score": 0,
"subscribers_count": 2
},
{
"id": 1225094797,
"name": "CopyFail-CVE-2026-31431",
"full_name": "ZephrFish\/CopyFail-CVE-2026-31431",
"owner": {
"login": "ZephrFish",
"id": 5783068,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5783068?v=4",
"html_url": "https:\/\/github.com\/ZephrFish",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ZephrFish\/CopyFail-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T00:11:10Z",
"updated_at": "2026-09-15T11:56:03Z",
"pushed_at": "2026-07-30T13:40:20Z",
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 30,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225103720,
"name": "copy-fail-tiny-elf-CVE-2026-31431",
"full_name": "Crihexe\/copy-fail-tiny-elf-CVE-2026-31431",
"owner": {
"login": "Crihexe",
"id": 36051144,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36051144?v=4",
"html_url": "https:\/\/github.com\/Crihexe",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Crihexe\/copy-fail-tiny-elf-CVE-2026-31431",
"description": "Minimal no-libc Linux x86_64 ELF PoC build for Copy Fail (CVE-2026-31431)",
"fork": false,
"created_at": "2026-04-30T00:30:40Z",
"updated_at": "2026-11-02T09:17:29Z",
"pushed_at": "2026-05-03T01:42:43Z",
"stargazers_count": 64,
"watchers_count": 64,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"af-alg",
"algif-aead",
"copy-fail",
"cve-2026-31431",
"elf",
"kernel-security",
"linux-kernel",
"linux-security",
"no-libc",
"poc",
"security-research",
"splice",
"tiny-elf",
"vulnerability-research",
"x86-64"
],
"visibility": "public",
"forks": 10,
"watchers": 64,
"score": 0,
"subscribers_count": 1
},
{
"id": 1225142784,
"name": "CVE-2026-31431-C",
"full_name": "b5null\/CVE-2026-31431-C",
"owner": {
"login": "b5null",
"id": 149713491,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149713491?v=4",
"html_url": "https:\/\/github.com\/b5null",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/b5null\/CVE-2026-31431-C",
"description": null,
"fork": false,
"created_at": "2026-04-30T01:47:40Z",
"updated_at": "2026-05-22T18:31:13Z",
"pushed_at": "2026-04-30T01:53:49Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225143519,
"name": "Copy-Fail-CVE-2026-31431-Statically-PoC",
"full_name": "Percivalll\/Copy-Fail-CVE-2026-31431-Statically-PoC",
"owner": {
"login": "Percivalll",
"id": 59213644,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59213644?v=4",
"html_url": "https:\/\/github.com\/Percivalll",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Percivalll\/Copy-Fail-CVE-2026-31431-Statically-PoC",
"description": null,
"fork": false,
"created_at": "2026-04-30T01:49:01Z",
"updated_at": "2026-06-18T07:46:05Z",
"pushed_at": "2026-04-30T03:51:00Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225158137,
"name": "CVE-2026-31431",
"full_name": "yiyihuohuo\/CVE-2026-31431",
"owner": {
"login": "yiyihuohuo",
"id": 62894366,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62894366?v=4",
"html_url": "https:\/\/github.com\/yiyihuohuo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yiyihuohuo\/CVE-2026-31431",
"description": "CVE-2026-31431EXP",
"fork": false,
"created_at": "2026-04-30T02:17:25Z",
"updated_at": "2026-04-30T02:19:21Z",
"pushed_at": "2026-04-30T02:19:12Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225160135,
"name": "cve-2026-31431",
"full_name": "ruattd\/cve-2026-31431",
"owner": {
"login": "ruattd",
"id": 61044187,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61044187?v=4",
"html_url": "https:\/\/github.com\/ruattd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ruattd\/cve-2026-31431",
"description": "Copy fail action runner test",
"fork": false,
"created_at": "2026-04-30T02:21:09Z",
"updated_at": "2026-04-30T03:24:08Z",
"pushed_at": "2026-04-30T03:24:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": true,
"web_commit_signoff_required": false,
"has_pull_requests": false,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225178660,
"name": "CVE-2026-31431-Advanced-Exploit",
"full_name": "Sndav\/CVE-2026-31431-Advanced-Exploit",
"owner": {
"login": "Sndav",
"id": 10370671,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10370671?v=4",
"html_url": "https:\/\/github.com\/Sndav",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Sndav\/CVE-2026-31431-Advanced-Exploit",
"description": "CVE-2026-31431 纯文件利用",
"fork": false,
"created_at": "2026-04-30T02:55:03Z",
"updated_at": "2026-10-29T08:12:22Z",
"pushed_at": "2026-04-30T16:24:17Z",
"stargazers_count": 115,
"watchers_count": 115,
"has_discussions": false,
"forks_count": 29,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 29,
"watchers": 115,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225179698,
"name": "CVE-2026-31431",
"full_name": "luotian2\/CVE-2026-31431",
"owner": {
"login": "luotian2",
"id": 278251426,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/278251426?v=4",
"html_url": "https:\/\/github.com\/luotian2",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/luotian2\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T02:57:05Z",
"updated_at": "2026-05-19T13:20:03Z",
"pushed_at": "2026-04-30T03:13:25Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225193020,
"name": "Detections-CVE-2026-31431",
"full_name": "insomnisec\/Detections-CVE-2026-31431",
"owner": {
"login": "insomnisec",
"id": 76190393,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76190393?v=4",
"html_url": "https:\/\/github.com\/insomnisec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/insomnisec\/Detections-CVE-2026-31431",
"description": "Detection rules for CVE-2026-31431 Linux LPE Vulnerability - Credit: (Copy Fail) https:\/\/copy.fail",
"fork": false,
"created_at": "2026-04-30T03:22:01Z",
"updated_at": "2026-10-02T00:30:38Z",
"pushed_at": "2026-05-18T00:15:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225193075,
"name": "CopyFail-CVE-2026-31431",
"full_name": "JnamerZ\/CopyFail-CVE-2026-31431",
"owner": {
"login": "JnamerZ",
"id": 97386720,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97386720?v=4",
"html_url": "https:\/\/github.com\/JnamerZ",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/JnamerZ\/CopyFail-CVE-2026-31431",
"description": "Rewrite https:\/\/github.com\/theori-io\/copy-fail-CVE-2026-31431 to C code",
"fork": false,
"created_at": "2026-04-30T03:22:07Z",
"updated_at": "2026-07-14T02:21:32Z",
"pushed_at": "2026-04-30T03:24:25Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225196738,
"name": "copy-fail-CVE-2026-31431",
"full_name": "vishwanathakuthota\/copy-fail-CVE-2026-31431",
"owner": {
"login": "vishwanathakuthota",
"id": 32350453,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32350453?v=4",
"html_url": "https:\/\/github.com\/vishwanathakuthota",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/vishwanathakuthota\/copy-fail-CVE-2026-31431",
"description": "copy-fail-CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T03:29:15Z",
"updated_at": "2026-04-30T03:31:19Z",
"pushed_at": "2026-04-30T03:31:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225203827,
"name": "CVE-2026-31431",
"full_name": "desultory\/CVE-2026-31431",
"owner": {
"login": "desultory",
"id": 116166721,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/116166721?v=4",
"html_url": "https:\/\/github.com\/desultory",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/desultory\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T03:42:24Z",
"updated_at": "2026-05-12T02:46:05Z",
"pushed_at": "2026-04-30T04:44:52Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225213210,
"name": "copyFail-CVE-2026-31431-workaround-bash",
"full_name": "someCorp\/copyFail-CVE-2026-31431-workaround-bash",
"owner": {
"login": "someCorp",
"id": 9676974,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9676974?v=4",
"html_url": "https:\/\/github.com\/someCorp",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/someCorp\/copyFail-CVE-2026-31431-workaround-bash",
"description": "copyFail-CVE-2026-31431-workaround-bash",
"fork": false,
"created_at": "2026-04-30T04:00:24Z",
"updated_at": "2026-04-30T05:00:17Z",
"pushed_at": "2026-04-30T05:00:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1225221498,
"name": "CVE-2026-31431-Linux-Copy-Fail",
"full_name": "iss4cf0ng\/CVE-2026-31431-Linux-Copy-Fail",
"owner": {
"login": "iss4cf0ng",
"id": 110074064,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110074064?v=4",
"html_url": "https:\/\/github.com\/iss4cf0ng",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/iss4cf0ng\/CVE-2026-31431-Linux-Copy-Fail",
"description": "Rust implementation Exploit\/PoC of CVE-2026-31431-Linux-Copy-Fail, allow executing customized shellcode (such as Meterpreter).",
"fork": false,
"created_at": "2026-04-30T04:16:32Z",
"updated_at": "2026-10-13T19:10:27Z",
"pushed_at": "2026-04-30T15:39:36Z",
"stargazers_count": 56,
"watchers_count": 56,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-31431",
"exploit",
"explotation",
"linux",
"linux-vulnerability",
"poc",
"privilege-escalation",
"privilege-escalation-exploits",
"proof-of-concept",
"rust",
"vulnerability",
"vulnerable"
],
"visibility": "public",
"forks": 21,
"watchers": 56,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225227927,
"name": "copy-fail-CVE-2026-31431-C",
"full_name": "novysodope\/copy-fail-CVE-2026-31431-C",
"owner": {
"login": "novysodope",
"id": 45167857,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45167857?v=4",
"html_url": "https:\/\/github.com\/novysodope",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/novysodope\/copy-fail-CVE-2026-31431-C",
"description": "CVE-2026-31431 - standalone binary exploit (no Python required)",
"fork": false,
"created_at": "2026-04-30T04:29:21Z",
"updated_at": "2026-07-01T08:47:47Z",
"pushed_at": "2026-04-30T05:20:24Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225234497,
"name": "cve-2026-31431-detection",
"full_name": "thrandomv\/cve-2026-31431-detection",
"owner": {
"login": "thrandomv",
"id": 147341515,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/147341515?v=4",
"html_url": "https:\/\/github.com\/thrandomv",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/thrandomv\/cve-2026-31431-detection",
"description": "Defensive detection package for CVE-2026-31431 (Linux kernel AF_ALG LPE). Sigma, Falco, auditd, KQL, and EQL rules mapped to MITRE ATT&CK T1068\/T1611. Includes detection logic designed for auditd, eBPF, and EDR telemetry pipelines.",
"fork": false,
"created_at": "2026-04-30T04:42:02Z",
"updated_at": "2026-06-10T20:47:38Z",
"pushed_at": "2026-04-30T05:28:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225239300,
"name": "copy-fail-CVE-2026-31431-universal",
"full_name": "Y5neKO\/copy-fail-CVE-2026-31431-universal",
"owner": {
"login": "Y5neKO",
"id": 41314905,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41314905?v=4",
"html_url": "https:\/\/github.com\/Y5neKO",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Y5neKO\/copy-fail-CVE-2026-31431-universal",
"description": "Multi-language implementation and compatibility with older versions of Python.",
"fork": false,
"created_at": "2026-04-30T04:50:57Z",
"updated_at": "2026-10-27T11:08:43Z",
"pushed_at": "2026-04-30T04:51:00Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225252358,
"name": "copy-fail-CVE-2026-31431-C",
"full_name": "bigwario\/copy-fail-CVE-2026-31431-C",
"owner": {
"login": "bigwario",
"id": 32082018,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32082018?v=4",
"html_url": "https:\/\/github.com\/bigwario",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bigwario\/copy-fail-CVE-2026-31431-C",
"description": null,
"fork": false,
"created_at": "2026-04-30T05:14:50Z",
"updated_at": "2026-05-06T08:27:31Z",
"pushed_at": "2026-05-06T08:27:27Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225271219,
"name": "CVE-2026-31431-",
"full_name": "twowb\/CVE-2026-31431-",
"owner": {
"login": "twowb",
"id": 84006356,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84006356?v=4",
"html_url": "https:\/\/github.com\/twowb",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/twowb\/CVE-2026-31431-",
"description": "Linux提权漏洞二进制版CVE-2026-31431 ",
"fork": false,
"created_at": "2026-04-30T05:46:47Z",
"updated_at": "2026-04-30T05:50:12Z",
"pushed_at": "2026-04-30T05:50:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225290691,
"name": "check-cve-2026-31431",
"full_name": "arkdev1\/check-cve-2026-31431",
"owner": {
"login": "arkdev1",
"id": 138211005,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/138211005?v=4",
"html_url": "https:\/\/github.com\/arkdev1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/arkdev1\/check-cve-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T06:16:55Z",
"updated_at": "2026-04-30T08:09:57Z",
"pushed_at": "2026-04-30T08:09:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225294574,
"name": "CVE-2026-31431-exploit",
"full_name": "wuwu001\/CVE-2026-31431-exploit",
"owner": {
"login": "wuwu001",
"id": 160086736,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/160086736?v=4",
"html_url": "https:\/\/github.com\/wuwu001",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/wuwu001\/CVE-2026-31431-exploit",
"description": "Linux local privilege escalation exploits for CVE-2026-31431, including raw and recoverable workflows.",
"fork": false,
"created_at": "2026-04-30T06:22:46Z",
"updated_at": "2026-05-01T09:00:24Z",
"pushed_at": "2026-04-30T12:34:55Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 1
},
{
"id": 1225311743,
"name": "CVE-2026-31431",
"full_name": "ryan2929\/CVE-2026-31431",
"owner": {
"login": "ryan2929",
"id": 31983296,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31983296?v=4",
"html_url": "https:\/\/github.com\/ryan2929",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ryan2929\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T06:47:01Z",
"updated_at": "2026-05-28T07:04:24Z",
"pushed_at": "2026-05-28T07:04:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225330169,
"name": "CVE-2026-31431",
"full_name": "0xShe\/CVE-2026-31431",
"owner": {
"login": "0xShe",
"id": 89628734,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89628734?v=4",
"html_url": "https:\/\/github.com\/0xShe",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xShe\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T07:09:23Z",
"updated_at": "2026-10-15T16:28:27Z",
"pushed_at": "2026-04-30T07:24:20Z",
"stargazers_count": 45,
"watchers_count": 45,
"has_discussions": false,
"forks_count": 20,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 20,
"watchers": 45,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225332828,
"name": "cve-2026-31431-fleet-remediator",
"full_name": "WavesMan\/cve-2026-31431-fleet-remediator",
"owner": {
"login": "WavesMan",
"id": 104572398,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104572398?v=4",
"html_url": "https:\/\/github.com\/WavesMan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WavesMan\/cve-2026-31431-fleet-remediator",
"description": "Fleet-scale CVE-2026-31431 audit and remediation orchestrator for Linux hosts via SSH, with strict host-key verification and multi-format reporting.",
"fork": false,
"created_at": "2026-04-30T07:11:44Z",
"updated_at": "2026-04-30T07:50:48Z",
"pushed_at": "2026-04-30T07:50:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225339348,
"name": "copy-fail-CVE-2026-31431",
"full_name": "wuzuowei\/copy-fail-CVE-2026-31431",
"owner": {
"login": "wuzuowei",
"id": 26717790,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26717790?v=4",
"html_url": "https:\/\/github.com\/wuzuowei",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/wuzuowei\/copy-fail-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T07:17:46Z",
"updated_at": "2026-04-30T07:29:42Z",
"pushed_at": "2026-04-30T07:29:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225342098,
"name": "copy-fail-cve-2026-31431-aarch64",
"full_name": "Isw-9\/copy-fail-cve-2026-31431-aarch64",
"owner": {
"login": "Isw-9",
"id": 130830720,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130830720?v=4",
"html_url": "https:\/\/github.com\/Isw-9",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Isw-9\/copy-fail-cve-2026-31431-aarch64",
"description": "References: https:\/\/github.com\/theori-io\/copy-fail-CVE-2026-31431; https:\/\/github.com\/bigwario\/copy-fail-CVE-2026-31431-C",
"fork": false,
"created_at": "2026-04-30T07:20:25Z",
"updated_at": "2026-04-30T07:26:08Z",
"pushed_at": "2026-04-30T07:26:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225342137,
"name": "RootRemover",
"full_name": "st4rburn\/RootRemover",
"owner": {
"login": "st4rburn",
"id": 57483028,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57483028?v=4",
"html_url": "https:\/\/github.com\/st4rburn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/st4rburn\/RootRemover",
"description": "Temporarily removes the root password using CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T07:20:26Z",
"updated_at": "2026-10-07T08:48:06Z",
"pushed_at": "2026-05-17T11:23:11Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225342881,
"name": "CVE-2026-31431",
"full_name": "freelabz\/CVE-2026-31431",
"owner": {
"login": "freelabz",
"id": 124344638,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124344638?v=4",
"html_url": "https:\/\/github.com\/freelabz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/freelabz\/CVE-2026-31431",
"description": "POC for CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T07:21:23Z",
"updated_at": "2026-04-30T07:24:56Z",
"pushed_at": "2026-04-30T07:24:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1225355295,
"name": "copy-fail-mitigate-no-reboot",
"full_name": "mrowkoob\/copy-fail-mitigate-no-reboot",
"owner": {
"login": "mrowkoob",
"id": 217596923,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/217596923?v=4",
"html_url": "https:\/\/github.com\/mrowkoob",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mrowkoob\/copy-fail-mitigate-no-reboot",
"description": "Quick mitigation for copy-fail kernel bug CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T07:37:17Z",
"updated_at": "2026-04-30T07:55:24Z",
"pushed_at": "2026-04-30T07:55:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225358435,
"name": "cve-2026-31431",
"full_name": "nisec-eric\/cve-2026-31431",
"owner": {
"login": "nisec-eric",
"id": 76679943,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76679943?v=4",
"html_url": "https:\/\/github.com\/nisec-eric",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nisec-eric\/cve-2026-31431",
"description": "AI for Work. x86_64 tested",
"fork": false,
"created_at": "2026-04-30T07:41:25Z",
"updated_at": "2026-08-14T09:03:57Z",
"pushed_at": "2026-05-01T11:43:25Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225369085,
"name": "CVE-2026-31431",
"full_name": "pascal-gujer\/CVE-2026-31431",
"owner": {
"login": "pascal-gujer",
"id": 1540942,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1540942?v=4",
"html_url": "https:\/\/github.com\/pascal-gujer",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pascal-gujer\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T07:55:41Z",
"updated_at": "2026-05-12T19:16:25Z",
"pushed_at": "2026-04-30T08:04:03Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225380973,
"name": "CVE-2026-31431-Golang",
"full_name": "eleveni386\/CVE-2026-31431-Golang",
"owner": {
"login": "eleveni386",
"id": 4001669,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4001669?v=4",
"html_url": "https:\/\/github.com\/eleveni386",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/eleveni386\/CVE-2026-31431-Golang",
"description": "CVE-2026-31431 Golang版本。摆脱Python3.10依赖",
"fork": false,
"created_at": "2026-04-30T08:11:37Z",
"updated_at": "2026-04-30T08:23:06Z",
"pushed_at": "2026-04-30T08:23:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225396365,
"name": "cve-2026-31431-mitigation",
"full_name": "Linux-zs\/cve-2026-31431-mitigation",
"owner": {
"login": "Linux-zs",
"id": 181069424,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/181069424?v=4",
"html_url": "https:\/\/github.com\/Linux-zs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Linux-zs\/cve-2026-31431-mitigation",
"description": "cve-2026-31431 seccomp mitigation",
"fork": false,
"created_at": "2026-04-30T08:31:56Z",
"updated_at": "2026-04-30T12:44:53Z",
"pushed_at": "2026-04-30T12:44:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225400692,
"name": "fuck_cve_2026_31431",
"full_name": "dixyes\/fuck_cve_2026_31431",
"owner": {
"login": "dixyes",
"id": 11804369,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11804369?v=4",
"html_url": "https:\/\/github.com\/dixyes",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dixyes\/fuck_cve_2026_31431",
"description": "fuck CVE-2026-31431 for not stoppable machines",
"fork": false,
"created_at": "2026-04-30T08:37:34Z",
"updated_at": "2026-04-30T09:20:46Z",
"pushed_at": "2026-04-30T09:20:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225421788,
"name": "copy-fail-CVE-2026-31431-IOC",
"full_name": "kadir\/copy-fail-CVE-2026-31431-IOC",
"owner": {
"login": "kadir",
"id": 8155237,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8155237?v=4",
"html_url": "https:\/\/github.com\/kadir",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kadir\/copy-fail-CVE-2026-31431-IOC",
"description": "Detection, mitigation, and IOC toolkit for Copy Fail CVE-2026-31431 Linux kernel page-cache privilege escalation",
"fork": false,
"created_at": "2026-04-30T09:02:51Z",
"updated_at": "2026-05-07T06:22:07Z",
"pushed_at": "2026-04-30T09:21:00Z",
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"copy-fail",
"copyfail",
"cve-2026-31431",
"incident-response",
"ioc",
"linux",
"linux-kernel",
"privilege-escalation",
"yara"
],
"visibility": "public",
"forks": 1,
"watchers": 31,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225429268,
"name": "copy.fail-mitigation-MLM",
"full_name": "jbiniek\/copy.fail-mitigation-MLM",
"owner": {
"login": "jbiniek",
"id": 75797607,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75797607?v=4",
"html_url": "https:\/\/github.com\/jbiniek",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jbiniek\/copy.fail-mitigation-MLM",
"description": "Salt state to deploy a mitigation of the copy.fail vulnerability (CVE-2026-31431)",
"fork": false,
"created_at": "2026-04-30T09:11:38Z",
"updated_at": "2026-04-30T10:10:33Z",
"pushed_at": "2026-04-30T10:10:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225454823,
"name": "CVE-2026-31431-Copy-Fail-Detection-Toolkit",
"full_name": "makitos666\/CVE-2026-31431-Copy-Fail-Detection-Toolkit",
"owner": {
"login": "makitos666",
"id": 3305564,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3305564?v=4",
"html_url": "https:\/\/github.com\/makitos666",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/makitos666\/CVE-2026-31431-Copy-Fail-Detection-Toolkit",
"description": null,
"fork": false,
"created_at": "2026-04-30T09:43:16Z",
"updated_at": "2026-04-30T09:44:10Z",
"pushed_at": "2026-04-30T09:44:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225461753,
"name": "CVE-2026-31431-exp",
"full_name": "lonelyor\/CVE-2026-31431-exp",
"owner": {
"login": "lonelyor",
"id": 23398106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23398106?v=4",
"html_url": "https:\/\/github.com\/lonelyor",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lonelyor\/CVE-2026-31431-exp",
"description": "根据py版本，升级成了c和rust版本，带加密混淆、0依赖（仅技术学习与分享）",
"fork": false,
"created_at": "2026-04-30T09:52:21Z",
"updated_at": "2026-06-22T04:02:26Z",
"pushed_at": "2026-05-11T06:34:14Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225462558,
"name": "Copy-Fail",
"full_name": "Phalanx-CCS\/Copy-Fail",
"owner": {
"login": "Phalanx-CCS",
"id": 273964038,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/273964038?v=4",
"html_url": "https:\/\/github.com\/Phalanx-CCS",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Phalanx-CCS\/Copy-Fail",
"description": "CVE-2026-31431 \"Copy Fail\" – Reachability Checker",
"fork": false,
"created_at": "2026-04-30T09:53:25Z",
"updated_at": "2026-05-06T08:21:34Z",
"pushed_at": "2026-05-04T08:27:57Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 1225464900,
"name": "CVE-2026-31431_SCA_WAZUH",
"full_name": "adampielak\/CVE-2026-31431_SCA_WAZUH",
"owner": {
"login": "adampielak",
"id": 12827483,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12827483?v=4",
"html_url": "https:\/\/github.com\/adampielak",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/adampielak\/CVE-2026-31431_SCA_WAZUH",
"description": "Wazuh SCA Linux hardening policy for Copy Fail (CVE-2026-31431)",
"fork": false,
"created_at": "2026-04-30T09:56:23Z",
"updated_at": "2026-06-16T21:33:28Z",
"pushed_at": "2026-06-16T21:32:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"linux-hardening",
"security",
"wazuh",
"wazuh-sca"
],
"visibility": "public",
"forks": 2,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225465296,
"name": "CVE-2026-31431-exploit_py2_py3",
"full_name": "jiangban046-spec\/CVE-2026-31431-exploit_py2_py3",
"owner": {
"login": "jiangban046-spec",
"id": 254365291,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/254365291?v=4",
"html_url": "https:\/\/github.com\/jiangban046-spec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jiangban046-spec\/CVE-2026-31431-exploit_py2_py3",
"description": "一个兼容python2和python3的CVE-2026-31431脚本",
"fork": false,
"created_at": "2026-04-30T09:56:56Z",
"updated_at": "2026-04-30T10:02:42Z",
"pushed_at": "2026-04-30T10:02:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225472478,
"name": "CVE-2026-31431",
"full_name": "dorianhhuc\/CVE-2026-31431",
"owner": {
"login": "dorianhhuc",
"id": 105780176,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105780176?v=4",
"html_url": "https:\/\/github.com\/dorianhhuc",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dorianhhuc\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T10:06:18Z",
"updated_at": "2026-04-30T10:13:32Z",
"pushed_at": "2026-04-30T10:13:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225478530,
"name": "CVE-2026-31431",
"full_name": "0xBlackash\/CVE-2026-31431",
"owner": {
"login": "0xBlackash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xBlackash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-31431",
"description": "CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T10:14:18Z",
"updated_at": "2026-05-06T15:54:24Z",
"pushed_at": "2026-04-30T10:24:44Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225482951,
"name": "copy-fail_LPE_Interactive",
"full_name": "H1d3r\/copy-fail_LPE_Interactive",
"owner": {
"login": "H1d3r",
"id": 10372856,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10372856?v=4",
"html_url": "https:\/\/github.com\/H1d3r",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/H1d3r\/copy-fail_LPE_Interactive",
"description": "CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T10:20:19Z",
"updated_at": "2026-04-30T10:21:23Z",
"pushed_at": "2026-04-30T10:21:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225484616,
"name": "cve-2026-31431-mitigation",
"full_name": "amdisrar\/cve-2026-31431-mitigation",
"owner": {
"login": "amdisrar",
"id": 9849015,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9849015?v=4",
"html_url": "https:\/\/github.com\/amdisrar",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/amdisrar\/cve-2026-31431-mitigation",
"description": "Temporary mitigation for Linux kernel local privilege escalation CVE-2026-31431 (AF_ALG interface)",
"fork": false,
"created_at": "2026-04-30T10:22:31Z",
"updated_at": "2026-07-13T12:12:39Z",
"pushed_at": "2026-04-30T21:01:53Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225484698,
"name": "CVE-2026-31431",
"full_name": "G01d3nW01f\/CVE-2026-31431",
"owner": {
"login": "G01d3nW01f",
"id": 75846902,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75846902?v=4",
"html_url": "https:\/\/github.com\/G01d3nW01f",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/G01d3nW01f\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T10:22:37Z",
"updated_at": "2026-04-30T10:23:35Z",
"pushed_at": "2026-04-30T10:23:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225500413,
"name": "copy-fail-CVE-2026-31431",
"full_name": "rio128128\/copy-fail-CVE-2026-31431",
"owner": {
"login": "rio128128",
"id": 136775778,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136775778?v=4",
"html_url": "https:\/\/github.com\/rio128128",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/rio128128\/copy-fail-CVE-2026-31431",
"description": "Copy Fail: 732 Bytes to Root on Every Major Linux Distribution.",
"fork": false,
"created_at": "2026-04-30T10:44:11Z",
"updated_at": "2026-04-30T10:53:01Z",
"pushed_at": "2026-04-30T10:52:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225504202,
"name": "CVE-2026-31431-CopyFail-Universal-LPE",
"full_name": "shadowabi\/CVE-2026-31431-CopyFail-Universal-LPE",
"owner": {
"login": "shadowabi",
"id": 50265741,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50265741?v=4",
"html_url": "https:\/\/github.com\/shadowabi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shadowabi\/CVE-2026-31431-CopyFail-Universal-LPE",
"description": "CVE-2026-31431 Copy Fail — Universal LPE exploit. Dynamic ELF offset + full-binary overwrite, Python 2\/3 compatible with ctypes splice fallback",
"fork": false,
"created_at": "2026-04-30T10:49:03Z",
"updated_at": "2026-10-26T15:04:08Z",
"pushed_at": "2026-05-06T16:22:13Z",
"stargazers_count": 59,
"watchers_count": 59,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"container-escape",
"copy-fail",
"cve-2026-31431",
"exploit",
"linux-kernel",
"lpe",
"privilege-escalation"
],
"visibility": "public",
"forks": 12,
"watchers": 59,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225513243,
"name": "CVE-2026-31431",
"full_name": "slauger\/CVE-2026-31431",
"owner": {
"login": "slauger",
"id": 8333300,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8333300?v=4",
"html_url": "https:\/\/github.com\/slauger",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/slauger\/CVE-2026-31431",
"description": "CVE-2026-31431 (Copy Fail) - Analysis and Mitigation for RHEL and OpenShift",
"fork": false,
"created_at": "2026-04-30T11:01:20Z",
"updated_at": "2026-06-15T00:37:21Z",
"pushed_at": "2026-04-30T11:34:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225524211,
"name": "Copy-Fail_Detect_and_mitigate_CVE-2026-31431",
"full_name": "Webhosting4U\/Copy-Fail_Detect_and_mitigate_CVE-2026-31431",
"owner": {
"login": "Webhosting4U",
"id": 14329448,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14329448?v=4",
"html_url": "https:\/\/github.com\/Webhosting4U",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Webhosting4U\/Copy-Fail_Detect_and_mitigate_CVE-2026-31431",
"description": "Detect and mitigate CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T11:16:17Z",
"updated_at": "2026-05-09T08:50:29Z",
"pushed_at": "2026-05-01T16:08:45Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225535151,
"name": "TEST-CVE-2026-31431",
"full_name": "gmeghnag\/TEST-CVE-2026-31431",
"owner": {
"login": "gmeghnag",
"id": 83286433,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83286433?v=4",
"html_url": "https:\/\/github.com\/gmeghnag",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/gmeghnag\/TEST-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T11:31:11Z",
"updated_at": "2026-04-30T12:10:22Z",
"pushed_at": "2026-04-30T12:10:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225536774,
"name": "Copy-Fail-CVE-2026-31431-Kubernetes-PoC",
"full_name": "Percivalll\/Copy-Fail-CVE-2026-31431-Kubernetes-PoC",
"owner": {
"login": "Percivalll",
"id": 59213644,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59213644?v=4",
"html_url": "https:\/\/github.com\/Percivalll",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Percivalll\/Copy-Fail-CVE-2026-31431-Kubernetes-PoC",
"description": "PoC: fully unprivileged container escape to node-level code execution on Kubernetes via CVE-2026-31431 page-cache corruption + shared image layers. Validated on Alibaba Cloud ACK, Amazon EKS and Google GKE.",
"fork": false,
"created_at": "2026-04-30T11:33:22Z",
"updated_at": "2026-10-27T23:07:21Z",
"pushed_at": "2026-05-07T09:04:29Z",
"stargazers_count": 194,
"watchers_count": 194,
"has_discussions": false,
"forks_count": 26,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"container-escape",
"cve-2026-31431",
"eks",
"exploit",
"kubernetes",
"linux-kernel",
"privilege-escalation",
"proof-of-concept",
"security-research",
"vulnerability"
],
"visibility": "public",
"forks": 26,
"watchers": 194,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225542121,
"name": "Copy_Fail_CVE-2026-31431_test_and_fix",
"full_name": "dicatalin\/Copy_Fail_CVE-2026-31431_test_and_fix",
"owner": {
"login": "dicatalin",
"id": 36884552,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36884552?v=4",
"html_url": "https:\/\/github.com\/dicatalin",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dicatalin\/Copy_Fail_CVE-2026-31431_test_and_fix",
"description": null,
"fork": false,
"created_at": "2026-04-30T11:40:34Z",
"updated_at": "2026-04-30T12:42:28Z",
"pushed_at": "2026-04-30T12:42:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225547505,
"name": "yc-mk8s-copy-fail-mitigation",
"full_name": "yandex-cloud-examples\/yc-mk8s-copy-fail-mitigation",
"owner": {
"login": "yandex-cloud-examples",
"id": 97603887,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97603887?v=4",
"html_url": "https:\/\/github.com\/yandex-cloud-examples",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yandex-cloud-examples\/yc-mk8s-copy-fail-mitigation",
"description": "DaemonSet для митигации уязвимости CVE-2026-31431 (Copy Fail)",
"fork": false,
"created_at": "2026-04-30T11:47:33Z",
"updated_at": "2026-05-19T20:50:12Z",
"pushed_at": "2026-05-12T09:17:28Z",
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"kubernetes",
"mk8s",
"security",
"yandex-cloud",
"yandexcloud"
],
"visibility": "public",
"forks": 1,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225560648,
"name": "CVE-2026-31431",
"full_name": "mfloresdacunha\/CVE-2026-31431",
"owner": {
"login": "mfloresdacunha",
"id": 177976400,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/177976400?v=4",
"html_url": "https:\/\/github.com\/mfloresdacunha",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mfloresdacunha\/CVE-2026-31431",
"description": "PoC exploit for CVE-2026-31431 (Copy Fail) — algif_aead page-cache scratch-write LPE",
"fork": false,
"created_at": "2026-04-30T12:04:39Z",
"updated_at": "2026-05-05T07:44:56Z",
"pushed_at": "2026-05-04T10:26:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225588136,
"name": "copyfail-rs",
"full_name": "Boos4721\/copyfail-rs",
"owner": {
"login": "Boos4721",
"id": 43845654,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43845654?v=4",
"html_url": "https:\/\/github.com\/Boos4721",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Boos4721\/copyfail-rs",
"description": "CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T12:39:26Z",
"updated_at": "2026-05-01T12:06:10Z",
"pushed_at": "2026-05-01T01:32:42Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225590950,
"name": "CVE-2026-31431",
"full_name": "eximiait\/CVE-2026-31431",
"owner": {
"login": "eximiait",
"id": 86000828,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86000828?v=4",
"html_url": "https:\/\/github.com\/eximiait",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/eximiait\/CVE-2026-31431",
"description": "Receta de ansible para verificar y mitigar CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T12:42:51Z",
"updated_at": "2026-04-30T12:47:45Z",
"pushed_at": "2026-04-30T12:46:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "collaborators_only",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225604678,
"name": "CVE-2026-31431",
"full_name": "JuanBindez\/CVE-2026-31431",
"owner": {
"login": "JuanBindez",
"id": 79322362,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79322362?v=4",
"html_url": "https:\/\/github.com\/JuanBindez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/JuanBindez\/CVE-2026-31431",
"description": "Copy Fail - CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T12:59:11Z",
"updated_at": "2026-10-30T13:08:09Z",
"pushed_at": "2026-06-05T02:59:22Z",
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 31,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225616932,
"name": "CVE-2026-31431-Patch",
"full_name": "XsanFlip\/CVE-2026-31431-Patch",
"owner": {
"login": "XsanFlip",
"id": 192573173,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/192573173?v=4",
"html_url": "https:\/\/github.com\/XsanFlip",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/XsanFlip\/CVE-2026-31431-Patch",
"description": "CVE-2026-31431-Patch",
"fork": false,
"created_at": "2026-04-30T13:13:48Z",
"updated_at": "2026-04-30T23:04:22Z",
"pushed_at": "2026-04-30T13:20:18Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225626691,
"name": "CVE-2026-31431-patch",
"full_name": "rshosting\/CVE-2026-31431-patch",
"owner": {
"login": "rshosting",
"id": 109739592,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109739592?v=4",
"html_url": "https:\/\/github.com\/rshosting",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/rshosting\/CVE-2026-31431-patch",
"description": "A temporary mitigation for CVE-2026-31431 vulneribility",
"fork": false,
"created_at": "2026-04-30T13:25:16Z",
"updated_at": "2026-04-30T18:11:24Z",
"pushed_at": "2026-04-30T18:10:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225638895,
"name": "CVE-2026-31431",
"full_name": "wesmar\/CVE-2026-31431",
"owner": {
"login": "wesmar",
"id": 61203372,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61203372?v=4",
"html_url": "https:\/\/github.com\/wesmar",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/wesmar\/CVE-2026-31431",
"description": "CVE-2026-31431 is a bug in the handling of scatter-gather I\/O operations and page cache references in the Linux kernel cryptographic subsystem — specifically in the AF_ALG socket implementation for AEAD algorithms (crypto\/af_alg.c, crypto\/aead.c).",
"fork": false,
"created_at": "2026-04-30T13:38:34Z",
"updated_at": "2026-09-02T08:05:19Z",
"pushed_at": "2026-04-30T14:46:40Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225656875,
"name": "wg.copyfail.patch",
"full_name": "wgnet\/wg.copyfail.patch",
"owner": {
"login": "wgnet",
"id": 7723999,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7723999?v=4",
"html_url": "https:\/\/github.com\/wgnet",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/wgnet\/wg.copyfail.patch",
"description": "CVE-2026-31431 eBPF fix",
"fork": false,
"created_at": "2026-04-30T13:55:25Z",
"updated_at": "2026-11-02T13:23:40Z",
"pushed_at": "2026-11-02T13:23:36Z",
"stargazers_count": 24,
"watchers_count": 24,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"copy-fail",
"cve-2026-31431",
"ebpf",
"fix",
"lsm",
"workaround"
],
"visibility": "public",
"forks": 5,
"watchers": 24,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225659577,
"name": "copy-fail-go",
"full_name": "cs8425\/copy-fail-go",
"owner": {
"login": "cs8425",
"id": 1642768,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1642768?v=4",
"html_url": "https:\/\/github.com\/cs8425",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cs8425\/copy-fail-go",
"description": "Copy Fail - CVE-2026-31431 in golang",
"fork": false,
"created_at": "2026-04-30T13:58:35Z",
"updated_at": "2026-07-23T06:59:52Z",
"pushed_at": "2026-04-30T14:02:45Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-31431",
"local-privilege-escalation"
],
"visibility": "public",
"forks": 2,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225665324,
"name": "copyfail-rs",
"full_name": "diemoeve\/copyfail-rs",
"owner": {
"login": "diemoeve",
"id": 105520646,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105520646?v=4",
"html_url": "https:\/\/github.com\/diemoeve",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/diemoeve\/copyfail-rs",
"description": "CopyFail (CVE-2026-31431): Linux kernel page-cache PrivEsc PoC + the only public detection tool. Novel PAM auth-bypass vector + Sigma\/auditd\/eBPF rules.",
"fork": false,
"created_at": "2026-04-30T14:04:58Z",
"updated_at": "2026-10-03T14:18:09Z",
"pushed_at": "2026-05-06T12:42:59Z",
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"af-alg",
"auditd",
"copyfail",
"cve-2026-31431",
"detection-engineering",
"ebpf",
"linux-kernel",
"no-std",
"page-cache",
"privilege-escalation",
"purple-team",
"rust",
"security",
"sigma-rules"
],
"visibility": "public",
"forks": 3,
"watchers": 18,
"score": 0,
"subscribers_count": 2
},
{
"id": 1225666349,
"name": "CVE-2026-31431",
"full_name": "yxdm02\/CVE-2026-31431",
"owner": {
"login": "yxdm02",
"id": 189938092,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/189938092?v=4",
"html_url": "https:\/\/github.com\/yxdm02",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yxdm02\/CVE-2026-31431",
"description": "CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T14:06:09Z",
"updated_at": "2026-04-30T14:18:01Z",
"pushed_at": "2026-04-30T14:16:12Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225672538,
"name": "CVE-2026-31431-old-python",
"full_name": "grishinpv\/CVE-2026-31431-old-python",
"owner": {
"login": "grishinpv",
"id": 88319804,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88319804?v=4",
"html_url": "https:\/\/github.com\/grishinpv",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/grishinpv\/CVE-2026-31431-old-python",
"description": "CVE-2026-31431 for python versions lower 3.10",
"fork": false,
"created_at": "2026-04-30T14:13:14Z",
"updated_at": "2026-04-30T14:21:18Z",
"pushed_at": "2026-04-30T14:18:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225685126,
"name": "copyfail-rs",
"full_name": "sammwyy\/copyfail-rs",
"owner": {
"login": "sammwyy",
"id": 44925968,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44925968?v=4",
"html_url": "https:\/\/github.com\/sammwyy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sammwyy\/copyfail-rs",
"description": "Copy Fail exploit (CVE-2026-31431) but in Rust.",
"fork": false,
"created_at": "2026-04-30T14:28:00Z",
"updated_at": "2026-10-26T15:04:08Z",
"pushed_at": "2026-04-30T14:44:20Z",
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"copy-fail",
"copyfail",
"cve",
"cve-2026-31431",
"local-privilege-escalation",
"lpe",
"poc",
"privilege-escalation"
],
"visibility": "public",
"forks": 2,
"watchers": 15,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225711440,
"name": "PATCH-CVE-2026-31431-Ubuntu_Debian",
"full_name": "SunL0w\/PATCH-CVE-2026-31431-Ubuntu_Debian",
"owner": {
"login": "SunL0w",
"id": 123123576,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123123576?v=4",
"html_url": "https:\/\/github.com\/SunL0w",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SunL0w\/PATCH-CVE-2026-31431-Ubuntu_Debian",
"description": "Permanent Mitigation Script for CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T14:58:26Z",
"updated_at": "2026-04-30T18:03:15Z",
"pushed_at": "2026-04-30T15:36:48Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225711769,
"name": "Paranoid-Copy-Fail-CVE-2026-31431",
"full_name": "scriptzteam\/Paranoid-Copy-Fail-CVE-2026-31431",
"owner": {
"login": "scriptzteam",
"id": 533180,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/533180?v=4",
"html_url": "https:\/\/github.com\/scriptzteam",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/scriptzteam\/Paranoid-Copy-Fail-CVE-2026-31431",
"description": "Paranoid disable whole AF_ALG + algif_* modules - Copy Fail (CVE-2026-31431)",
"fork": false,
"created_at": "2026-04-30T14:58:49Z",
"updated_at": "2026-05-02T10:20:15Z",
"pushed_at": "2026-04-30T15:03:43Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225714491,
"name": "copy-fail-blocker",
"full_name": "cozystack\/copy-fail-blocker",
"owner": {
"login": "cozystack",
"id": 202342215,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202342215?v=4",
"html_url": "https:\/\/github.com\/cozystack",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cozystack\/copy-fail-blocker",
"description": "BPF-LSM mitigation for CVE-2026-31431 (Copy Fail) — denies AF_ALG socket creation cluster-wide",
"fork": false,
"created_at": "2026-04-30T15:02:00Z",
"updated_at": "2026-10-23T05:07:31Z",
"pushed_at": "2026-05-08T08:30:28Z",
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": true,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 35,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225716790,
"name": "cve-2026-31431",
"full_name": "leelong2020\/cve-2026-31431",
"owner": {
"login": "leelong2020",
"id": 16743081,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16743081?v=4",
"html_url": "https:\/\/github.com\/leelong2020",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/leelong2020\/cve-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T15:04:42Z",
"updated_at": "2026-05-01T07:22:01Z",
"pushed_at": "2026-05-01T07:21:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225728094,
"name": "CVE-2026-31431-cleaned",
"full_name": "galoryber\/CVE-2026-31431-cleaned",
"owner": {
"login": "galoryber",
"id": 51980089,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51980089?v=4",
"html_url": "https:\/\/github.com\/galoryber",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/galoryber\/CVE-2026-31431-cleaned",
"description": "CVE-2026-31431 cleaned up to be readable and thoroughly explained, including the embedded ELF",
"fork": false,
"created_at": "2026-04-30T15:18:04Z",
"updated_at": "2026-04-30T21:02:13Z",
"pushed_at": "2026-04-30T15:19:01Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225741335,
"name": "fail-CVE-2026-31431",
"full_name": "vynazevedo\/fail-CVE-2026-31431",
"owner": {
"login": "vynazevedo",
"id": 78885767,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78885767?v=4",
"html_url": "https:\/\/github.com\/vynazevedo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/vynazevedo\/fail-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T15:34:05Z",
"updated_at": "2026-04-30T15:34:27Z",
"pushed_at": "2026-04-30T15:34:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225743455,
"name": "Copy-Fail-CVE-2026-31431",
"full_name": "MohamedKarrab\/Copy-Fail-CVE-2026-31431",
"owner": {
"login": "MohamedKarrab",
"id": 107933631,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107933631?v=4",
"html_url": "https:\/\/github.com\/MohamedKarrab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MohamedKarrab\/Copy-Fail-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T15:36:35Z",
"updated_at": "2026-04-30T16:34:03Z",
"pushed_at": "2026-04-30T16:32:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225753891,
"name": "CVE-2026-31431-PoC",
"full_name": "w3llr00t3d\/CVE-2026-31431-PoC",
"owner": {
"login": "w3llr00t3d",
"id": 1784665,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1784665?v=4",
"html_url": "https:\/\/github.com\/w3llr00t3d",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/w3llr00t3d\/CVE-2026-31431-PoC",
"description": "LPE exploit for CVE-2026-31431 CopyFail. Compatible with Python 3.9.",
"fork": false,
"created_at": "2026-04-30T15:49:50Z",
"updated_at": "2026-04-30T16:14:42Z",
"pushed_at": "2026-04-30T16:14:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225754609,
"name": "CVE-2026-31431-Copy-Fail",
"full_name": "sec17br\/CVE-2026-31431-Copy-Fail",
"owner": {
"login": "sec17br",
"id": 248482227,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/248482227?v=4",
"html_url": "https:\/\/github.com\/sec17br",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sec17br\/CVE-2026-31431-Copy-Fail",
"description": null,
"fork": false,
"created_at": "2026-04-30T15:50:45Z",
"updated_at": "2026-05-02T06:53:20Z",
"pushed_at": "2026-04-30T17:02:19Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225770619,
"name": "CopyFail-Patcher",
"full_name": "mhdgning131\/CopyFail-Patcher",
"owner": {
"login": "mhdgning131",
"id": 106834066,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106834066?v=4",
"html_url": "https:\/\/github.com\/mhdgning131",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mhdgning131\/CopyFail-Patcher",
"description": "Here is patch script to CVE-2026-31431 CopyFail",
"fork": false,
"created_at": "2026-04-30T16:10:50Z",
"updated_at": "2026-05-10T16:53:00Z",
"pushed_at": "2026-05-01T20:07:38Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225772536,
"name": "CVE-2026-31431-rs",
"full_name": "Xerxes-2\/CVE-2026-31431-rs",
"owner": {
"login": "Xerxes-2",
"id": 35587143,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35587143?v=4",
"html_url": "https:\/\/github.com\/Xerxes-2",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Xerxes-2\/CVE-2026-31431-rs",
"description": null,
"fork": false,
"created_at": "2026-04-30T16:13:19Z",
"updated_at": "2026-05-01T09:09:28Z",
"pushed_at": "2026-05-01T09:09:24Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225776432,
"name": "cve-2026-31431",
"full_name": "SeanRickerd\/cve-2026-31431",
"owner": {
"login": "SeanRickerd",
"id": 5073531,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5073531?v=4",
"html_url": "https:\/\/github.com\/SeanRickerd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SeanRickerd\/cve-2026-31431",
"description": "Exploit for cve-2026-31431",
"fork": false,
"created_at": "2026-04-30T16:18:31Z",
"updated_at": "2026-10-18T11:35:40Z",
"pushed_at": "2026-05-01T15:10:22Z",
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 13,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225777428,
"name": "CVE-2026-31431",
"full_name": "abdullaabdullazade\/CVE-2026-31431",
"owner": {
"login": "abdullaabdullazade",
"id": 89068450,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89068450?v=4",
"html_url": "https:\/\/github.com\/abdullaabdullazade",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/abdullaabdullazade\/CVE-2026-31431",
"description": "CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T16:19:53Z",
"updated_at": "2026-10-08T05:26:26Z",
"pushed_at": "2026-04-30T16:28:21Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-31431"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225788769,
"name": "copy-fail",
"full_name": "weirdindiankid\/copy-fail",
"owner": {
"login": "weirdindiankid",
"id": 10239981,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10239981?v=4",
"html_url": "https:\/\/github.com\/weirdindiankid",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/weirdindiankid\/copy-fail",
"description": "CVE-2026-31431 proof of concept.",
"fork": false,
"created_at": "2026-04-30T16:34:27Z",
"updated_at": "2026-04-30T16:34:41Z",
"pushed_at": "2026-04-30T16:34:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225862219,
"name": "CVE-2026-31431",
"full_name": "websecnl\/CVE-2026-31431",
"owner": {
"login": "websecnl",
"id": 20278695,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20278695?v=4",
"html_url": "https:\/\/github.com\/websecnl",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/websecnl\/CVE-2026-31431",
"description": " Linux algif_aead page-cache write to root - Local Privilege Escalation Exploit",
"fork": false,
"created_at": "2026-04-30T18:09:42Z",
"updated_at": "2026-04-30T18:18:19Z",
"pushed_at": "2026-04-30T18:18:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225885417,
"name": "CVE-2026-31431-mitigation",
"full_name": "Dabbleam\/CVE-2026-31431-mitigation",
"owner": {
"login": "Dabbleam",
"id": 5872789,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5872789?v=4",
"html_url": "https:\/\/github.com\/Dabbleam",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Dabbleam\/CVE-2026-31431-mitigation",
"description": "eBPF-based daemon to mitigate CVE-2026-31431 on systems where `algif_aead` is built into the kernel, without a reboot!",
"fork": false,
"created_at": "2026-04-30T18:42:24Z",
"updated_at": "2026-10-09T00:38:43Z",
"pushed_at": "2026-04-30T19:13:28Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225900557,
"name": "mks-copy-fail-mitigation",
"full_name": "selectel\/mks-copy-fail-mitigation",
"owner": {
"login": "selectel",
"id": 804735,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/804735?v=4",
"html_url": "https:\/\/github.com\/selectel",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/selectel\/mks-copy-fail-mitigation",
"description": "DaemonSet с реализацией временной меры для митигации уязвимости Copy Fail (CVE-2026-31431)",
"fork": false,
"created_at": "2026-04-30T19:04:54Z",
"updated_at": "2026-05-19T17:38:39Z",
"pushed_at": "2026-05-19T17:38:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225929597,
"name": "harden-docker-seccomp",
"full_name": "devstuff\/harden-docker-seccomp",
"owner": {
"login": "devstuff",
"id": 1892816,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1892816?v=4",
"html_url": "https:\/\/github.com\/devstuff",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/devstuff\/harden-docker-seccomp",
"description": "Docker mitigation for CVE-2026-31431 ('Copy Fail'). Includes Kubernetes templates as well.",
"fork": false,
"created_at": "2026-04-30T19:47:18Z",
"updated_at": "2026-05-03T21:17:54Z",
"pushed_at": "2026-05-01T18:11:26Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225932886,
"name": "cve-2026-31431-poc",
"full_name": "yuspring\/cve-2026-31431-poc",
"owner": {
"login": "yuspring",
"id": 75129303,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75129303?v=4",
"html_url": "https:\/\/github.com\/yuspring",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yuspring\/cve-2026-31431-poc",
"description": null,
"fork": false,
"created_at": "2026-04-30T19:52:27Z",
"updated_at": "2026-06-05T11:04:52Z",
"pushed_at": "2026-05-01T00:07:59Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225960344,
"name": "CVE_2026_31431",
"full_name": "mishl-dev\/CVE_2026_31431",
"owner": {
"login": "mishl-dev",
"id": 91066601,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91066601?v=4",
"html_url": "https:\/\/github.com\/mishl-dev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mishl-dev\/CVE_2026_31431",
"description": "CVE-2026-31431 is a deterministic race‑free logic bug in the Linux kernel",
"fork": false,
"created_at": "2026-04-30T20:35:09Z",
"updated_at": "2026-05-01T08:31:01Z",
"pushed_at": "2026-04-30T21:10:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225962329,
"name": "copy-fail",
"full_name": "Juguitos\/copy-fail",
"owner": {
"login": "Juguitos",
"id": 112290504,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112290504?v=4",
"html_url": "https:\/\/github.com\/Juguitos",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Juguitos\/copy-fail",
"description": "CVE-2026-31431 - Copy Fail PoC (Python 3.10+)",
"fork": false,
"created_at": "2026-04-30T20:38:16Z",
"updated_at": "2026-10-28T01:21:59Z",
"pushed_at": "2026-05-09T17:48:00Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225965903,
"name": "CVE-2026-31431-poc",
"full_name": "DENNISDGR\/CVE-2026-31431-poc",
"owner": {
"login": "DENNISDGR",
"id": 88437053,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88437053?v=4",
"html_url": "https:\/\/github.com\/DENNISDGR",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/DENNISDGR\/CVE-2026-31431-poc",
"description": "An adapted version of the copy fail exploit to use parameters instead of dropping you into a root shell",
"fork": false,
"created_at": "2026-04-30T20:44:03Z",
"updated_at": "2026-05-06T05:34:30Z",
"pushed_at": "2026-04-30T21:10:12Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225972555,
"name": "CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script",
"full_name": "liamromanis101\/CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script",
"owner": {
"login": "liamromanis101",
"id": 67465405,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67465405?v=4",
"html_url": "https:\/\/github.com\/liamromanis101",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/liamromanis101\/CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script",
"description": "Detection Only.. working on an exploit PoC",
"fork": false,
"created_at": "2026-04-30T20:54:56Z",
"updated_at": "2026-11-01T12:33:42Z",
"pushed_at": "2026-05-06T14:09:40Z",
"stargazers_count": 26,
"watchers_count": 26,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-31431",
"docker",
"kubernetes",
"linux"
],
"visibility": "public",
"forks": 2,
"watchers": 26,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225973665,
"name": "COPY-FAIL-Detection-with-Wazuh-4.14.4",
"full_name": "mym0us3r\/COPY-FAIL-Detection-with-Wazuh-4.14.4",
"owner": {
"login": "mym0us3r",
"id": 181935709,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/181935709?v=4",
"html_url": "https:\/\/github.com\/mym0us3r",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mym0us3r\/COPY-FAIL-Detection-with-Wazuh-4.14.4",
"description": "Wazuh 4.14.4 detection rules for CVE-2026-31431 (Copy Fail) - Linux Local Privilege Escalation via authencesn page cache write",
"fork": false,
"created_at": "2026-04-30T20:56:49Z",
"updated_at": "2026-10-14T10:41:55Z",
"pushed_at": "2026-05-04T14:42:14Z",
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"auditd",
"blueteam",
"copy-fail",
"cve-2026-31431",
"detection-engineering",
"kali",
"linux",
"lpe",
"sca",
"siem",
"wazuh"
],
"visibility": "public",
"forks": 0,
"watchers": 10,
"score": 0,
"subscribers_count": 1
},
{
"id": 1225977479,
"name": "copy-fail-CVE-2026-31431",
"full_name": "B1gN0Se\/copy-fail-CVE-2026-31431",
"owner": {
"login": "B1gN0Se",
"id": 86577632,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86577632?v=4",
"html_url": "https:\/\/github.com\/B1gN0Se",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/B1gN0Se\/copy-fail-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T21:03:41Z",
"updated_at": "2026-04-30T21:06:07Z",
"pushed_at": "2026-04-30T21:06:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225993908,
"name": "CVE-2026-31431---Copy-Fail-PoC",
"full_name": "maniakh\/CVE-2026-31431---Copy-Fail-PoC",
"owner": {
"login": "maniakh",
"id": 127797394,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127797394?v=4",
"html_url": "https:\/\/github.com\/maniakh",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/maniakh\/CVE-2026-31431---Copy-Fail-PoC",
"description": "Bu depo, Linux cekirdeginde (kernel) bulunan CVE-2026-31431 (Copy Fail) zafiyetini icermektedir. Zafiyet, algif_aead modülündeki bir optimizasyon hatasini kullanarak sayfa onbellegindeki (page cache) salt-okunur dosyalari manipule etmeye olanak tanir.",
"fork": false,
"created_at": "2026-04-30T21:32:23Z",
"updated_at": "2026-05-01T21:51:59Z",
"pushed_at": "2026-05-01T21:51:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225996272,
"name": "copyfailautopatch",
"full_name": "meowteusz\/copyfailautopatch",
"owner": {
"login": "meowteusz",
"id": 7564427,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7564427?v=4",
"html_url": "https:\/\/github.com\/meowteusz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/meowteusz\/copyfailautopatch",
"description": "Detect and fix copy.fail CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T21:36:54Z",
"updated_at": "2026-04-30T21:38:39Z",
"pushed_at": "2026-04-30T21:38:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226036200,
"name": "copy-fail-cve-2026-31431",
"full_name": "effiesec\/copy-fail-cve-2026-31431",
"owner": {
"login": "effiesec",
"id": 280804778,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/280804778?v=4",
"html_url": "https:\/\/github.com\/effiesec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/effiesec\/copy-fail-cve-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T22:55:20Z",
"updated_at": "2026-04-30T22:55:20Z",
"pushed_at": "2026-04-30T22:03:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226044650,
"name": "CVE-2026-31431",
"full_name": "offsecguy\/CVE-2026-31431",
"owner": {
"login": "offsecguy",
"id": 77571967,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77571967?v=4",
"html_url": "https:\/\/github.com\/offsecguy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/offsecguy\/CVE-2026-31431",
"description": "Copy Fail is a straight-line logic flaw | C port | CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T23:13:37Z",
"updated_at": "2026-05-01T00:23:06Z",
"pushed_at": "2026-05-01T00:23:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226051708,
"name": "CVE-2026-31431.c",
"full_name": "poyea\/CVE-2026-31431.c",
"owner": {
"login": "poyea",
"id": 24757020,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24757020?v=4",
"html_url": "https:\/\/github.com\/poyea",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/poyea\/CVE-2026-31431.c",
"description": "CVE-2026-31431 in C",
"fork": false,
"created_at": "2026-04-30T23:29:50Z",
"updated_at": "2026-05-01T01:44:00Z",
"pushed_at": "2026-05-01T01:43:28Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 1226092217,
"name": "copy-fail-fix",
"full_name": "bryanvine\/copy-fail-fix",
"owner": {
"login": "bryanvine",
"id": 2412002,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2412002?v=4",
"html_url": "https:\/\/github.com\/bryanvine",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bryanvine\/copy-fail-fix",
"description": "Per-distro mitigation scripts for CVE-2026-31431 (\"Copy Fail\") Linux kernel LPE.",
"fork": false,
"created_at": "2026-05-01T01:00:46Z",
"updated_at": "2026-05-11T08:55:24Z",
"pushed_at": "2026-05-01T02:21:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226111504,
"name": "cve-2026-31431-algif-aead-remediator",
"full_name": "boliu83\/cve-2026-31431-algif-aead-remediator",
"owner": {
"login": "boliu83",
"id": 7767774,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7767774?v=4",
"html_url": "https:\/\/github.com\/boliu83",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/boliu83\/cve-2026-31431-algif-aead-remediator",
"description": "Kubernetes DaemonSet to detect and remediate CVE-2026-31431 (GHSA-2274-3hgr-wxv6) — algif_aead LPE via modprobe blacklist",
"fork": false,
"created_at": "2026-05-01T01:43:41Z",
"updated_at": "2026-05-01T01:43:49Z",
"pushed_at": "2026-05-01T01:43:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226137976,
"name": "Copy-Fail-Exploit-CVE-2026-31431",
"full_name": "Spoo1k\/Copy-Fail-Exploit-CVE-2026-31431",
"owner": {
"login": "Spoo1k",
"id": 73661429,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73661429?v=4",
"html_url": "https:\/\/github.com\/Spoo1k",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Spoo1k\/Copy-Fail-Exploit-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-01T02:41:41Z",
"updated_at": "2026-05-01T02:52:57Z",
"pushed_at": "2026-05-01T02:52:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226144308,
"name": "copy-fail-go",
"full_name": "3jee\/copy-fail-go",
"owner": {
"login": "3jee",
"id": 74990727,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74990727?v=4",
"html_url": "https:\/\/github.com\/3jee",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/3jee\/copy-fail-go",
"description": "CVE-2026-31431 (copy-fail) - Go port of grenkoca's PoC with automatic SUID world-readable binary enumeration",
"fork": false,
"created_at": "2026-05-01T02:54:49Z",
"updated_at": "2026-09-23T10:28:21Z",
"pushed_at": "2026-05-01T03:20:50Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226145956,
"name": "alg_check",
"full_name": "professional-slacker\/alg_check",
"owner": {
"login": "professional-slacker",
"id": 251648406,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/251648406?v=4",
"html_url": "https:\/\/github.com\/professional-slacker",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/professional-slacker\/alg_check",
"description": "CVE-2026-31431",
"fork": false,
"created_at": "2026-05-01T02:58:17Z",
"updated_at": "2026-05-04T14:50:15Z",
"pushed_at": "2026-05-04T14:50:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226166399,
"name": "cve-2026-31431-ansible",
"full_name": "aestechno\/cve-2026-31431-ansible",
"owner": {
"login": "aestechno",
"id": 117153781,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117153781?v=4",
"html_url": "https:\/\/github.com\/aestechno",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aestechno\/cve-2026-31431-ansible",
"description": "cve-2026-31431 fix with ansible",
"fork": false,
"created_at": "2026-05-01T03:43:03Z",
"updated_at": "2026-05-02T12:16:40Z",
"pushed_at": "2026-05-01T03:54:02Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226174732,
"name": "cve-2026-31431",
"full_name": "ashok523\/cve-2026-31431",
"owner": {
"login": "ashok523",
"id": 33694497,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33694497?v=4",
"html_url": "https:\/\/github.com\/ashok523",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ashok523\/cve-2026-31431",
"description": "he recently disclosed CVE-2026-31431 — also known as Copy Fail — is not something to take lightly. ",
"fork": false,
"created_at": "2026-05-01T04:01:21Z",
"updated_at": "2026-05-02T06:38:22Z",
"pushed_at": "2026-05-02T06:38:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226180810,
"name": "copyfail-briefing",
"full_name": "jodonnel\/copyfail-briefing",
"owner": {
"login": "jodonnel",
"id": 68969784,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68969784?v=4",
"html_url": "https:\/\/github.com\/jodonnel",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jodonnel\/copyfail-briefing",
"description": "CVE-2026-31431 (Copy Fail) — Security briefings and remediation comparison",
"fork": false,
"created_at": "2026-05-01T04:15:12Z",
"updated_at": "2026-05-01T04:59:26Z",
"pushed_at": "2026-05-01T04:59:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226195197,
"name": "Copy-Fail-CVE-2026-31431-Kubernetes-PoC",
"full_name": "starscow\/Copy-Fail-CVE-2026-31431-Kubernetes-PoC",
"owner": {
"login": "starscow",
"id": 52118624,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52118624?v=4",
"html_url": "https:\/\/github.com\/starscow",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/starscow\/Copy-Fail-CVE-2026-31431-Kubernetes-PoC",
"description": null,
"fork": false,
"created_at": "2026-05-01T04:47:47Z",
"updated_at": "2026-09-09T06:52:40Z",
"pushed_at": "2026-04-30T13:29:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226206997,
"name": "d8-copy-fail-mitigation",
"full_name": "deckhouse\/d8-copy-fail-mitigation",
"owner": {
"login": "deckhouse",
"id": 55947180,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55947180?v=4",
"html_url": "https:\/\/github.com\/deckhouse",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/deckhouse\/d8-copy-fail-mitigation",
"description": "CVE-2026-31431 mitigation (Copy Fail)",
"fork": false,
"created_at": "2026-05-01T05:13:42Z",
"updated_at": "2026-05-15T16:23:16Z",
"pushed_at": "2026-05-15T16:23:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": true,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226215815,
"name": "copy-fail-CVE-2026-31431",
"full_name": "jneuhauser\/copy-fail-CVE-2026-31431",
"owner": {
"login": "jneuhauser",
"id": 39044176,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39044176?v=4",
"html_url": "https:\/\/github.com\/jneuhauser",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jneuhauser\/copy-fail-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-01T05:32:30Z",
"updated_at": "2026-05-01T05:33:41Z",
"pushed_at": "2026-04-29T21:21:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226218166,
"name": "copy-fail-python",
"full_name": "cyber-joker\/copy-fail-python",
"owner": {
"login": "cyber-joker",
"id": 55675835,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55675835?v=4",
"html_url": "https:\/\/github.com\/cyber-joker",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cyber-joker\/copy-fail-python",
"description": "Python implementation of copyfail (CVE-2026-31431)",
"fork": false,
"created_at": "2026-05-01T05:37:29Z",
"updated_at": "2026-05-27T17:36:35Z",
"pushed_at": "2026-05-01T05:44:12Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226281843,
"name": "CVE-2026-31431",
"full_name": "HulnotHutu\/CVE-2026-31431",
"owner": {
"login": "HulnotHutu",
"id": 155052172,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/155052172?v=4",
"html_url": "https:\/\/github.com\/HulnotHutu",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HulnotHutu\/CVE-2026-31431",
"description": "对 CVE-2026-31431 的复现分析、C 改编的 exp。",
"fork": false,
"created_at": "2026-05-01T07:36:05Z",
"updated_at": "2026-05-16T08:55:52Z",
"pushed_at": "2026-05-16T08:55:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226286065,
"name": "copyfail-mitigation",
"full_name": "mahradbt\/copyfail-mitigation",
"owner": {
"login": "mahradbt",
"id": 20989614,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20989614?v=4",
"html_url": "https:\/\/github.com\/mahradbt",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mahradbt\/copyfail-mitigation",
"description": "Ansible playbooks to audit and mitigate CVE-2026-31431 (\"Copy Fail\"), a local privilege escalation vulnerability in the Linux kernel's `algif_aead` module affecting all major distributions since 2017.",
"fork": false,
"created_at": "2026-05-01T07:43:40Z",
"updated_at": "2026-09-28T12:01:46Z",
"pushed_at": "2026-05-01T07:48:25Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226318839,
"name": "almalinux-fix-cve-2026-31431",
"full_name": "OmerAti\/almalinux-fix-cve-2026-31431",
"owner": {
"login": "OmerAti",
"id": 67821076,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67821076?v=4",
"html_url": "https:\/\/github.com\/OmerAti",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/OmerAti\/almalinux-fix-cve-2026-31431",
"description": "CVE-2026-31431 Kernel Fix Script",
"fork": false,
"created_at": "2026-05-01T08:33:26Z",
"updated_at": "2026-05-08T11:58:12Z",
"pushed_at": "2026-05-08T11:58:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226337482,
"name": "copy-fail-cve-2026-31431",
"full_name": "ErdemOzgen\/copy-fail-cve-2026-31431",
"owner": {
"login": "ErdemOzgen",
"id": 14043035,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14043035?v=4",
"html_url": "https:\/\/github.com\/ErdemOzgen",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ErdemOzgen\/copy-fail-cve-2026-31431",
"description": "Golang port of copy-fail-cve-2026-31431",
"fork": false,
"created_at": "2026-05-01T09:06:10Z",
"updated_at": "2026-05-15T02:45:51Z",
"pushed_at": "2026-05-01T21:25:09Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"binary",
"copy-fail",
"cve-2026-31431",
"cybersecurity",
"golang"
],
"visibility": "public",
"forks": 0,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226367430,
"name": "CVE-2026-31431-PocC",
"full_name": "Fulucky0-yuri\/CVE-2026-31431-PocC",
"owner": {
"login": "Fulucky0-yuri",
"id": 273777396,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/273777396?v=4",
"html_url": "https:\/\/github.com\/Fulucky0-yuri",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Fulucky0-yuri\/CVE-2026-31431-PocC",
"description": "CVE-2026-31431 C语言复现的poc，可在目标环境没有py时进行利用",
"fork": false,
"created_at": "2026-05-01T09:57:31Z",
"updated_at": "2026-09-07T05:37:57Z",
"pushed_at": "2026-05-01T10:23:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226369071,
"name": "CVE-2026-31431",
"full_name": "abhishekhargan\/CVE-2026-31431",
"owner": {
"login": "abhishekhargan",
"id": 11030999,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11030999?v=4",
"html_url": "https:\/\/github.com\/abhishekhargan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/abhishekhargan\/CVE-2026-31431",
"description": "CVE-2026-31431: \"Copy Fail\" - Linux Kernel Local Privilege Escalation",
"fork": false,
"created_at": "2026-05-01T10:00:12Z",
"updated_at": "2026-05-01T11:21:16Z",
"pushed_at": "2026-05-01T11:21:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226374918,
"name": "cve_2026_31431_audit",
"full_name": "MarioHY\/cve_2026_31431_audit",
"owner": {
"login": "MarioHY",
"id": 164368850,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164368850?v=4",
"html_url": "https:\/\/github.com\/MarioHY",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MarioHY\/cve_2026_31431_audit",
"description": "A security auditing toolkit for CVE-2026-31431 vulnerability research",
"fork": false,
"created_at": "2026-05-01T10:09:59Z",
"updated_at": "2026-05-02T02:27:08Z",
"pushed_at": "2026-05-01T12:17:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226376399,
"name": "CVE-2026-31431",
"full_name": "AliHzSec\/CVE-2026-31431",
"owner": {
"login": "AliHzSec",
"id": 154372910,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/154372910?v=4",
"html_url": "https:\/\/github.com\/AliHzSec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AliHzSec\/CVE-2026-31431",
"description": "CVE-2026-31431 Linux Local Privilege Escalation (LPE) Proof of Concept exploit",
"fork": false,
"created_at": "2026-05-01T10:12:37Z",
"updated_at": "2026-07-30T08:36:08Z",
"pushed_at": "2026-05-01T10:29:02Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-31431",
"cve-2026-31431-lpe-exploit",
"cve-2026-31431-poc",
"ethical-hacking",
"exploit",
"kernel-exploit",
"kernel-exploitation",
"linux-exploits",
"linux-lpe-cve-2026-31431",
"local-privilege-escalation",
"lpe",
"offensive-security",
"poc",
"privilege-escalation",
"proof-of-concept",
"security",
"vulnerability"
],
"visibility": "public",
"forks": 7,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226395523,
"name": "copy-fail-exploit-on-c-redteam",
"full_name": "toxy4ny\/copy-fail-exploit-on-c-redteam",
"owner": {
"login": "toxy4ny",
"id": 199085504,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/199085504?v=4",
"html_url": "https:\/\/github.com\/toxy4ny",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/toxy4ny\/copy-fail-exploit-on-c-redteam",
"description": "Copy Fail -- CVE-2026-31431 - Hardened AF_ALG\/splice page-cache mutation primitive for RedTeam Ops.",
"fork": false,
"created_at": "2026-05-01T10:43:26Z",
"updated_at": "2026-10-19T16:36:26Z",
"pushed_at": "2026-05-01T16:19:38Z",
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bypass-edr",
"cve-2026-31431",
"education",
"exploit",
"exploitation",
"hardening",
"linux",
"redteam",
"redteaming",
"remake"
],
"visibility": "public",
"forks": 0,
"watchers": 9,
"score": 0,
"subscribers_count": 1
},
{
"id": 1226407574,
"name": "CVE-2026-31431-live-process-code-injection",
"full_name": "kvakirsanov\/CVE-2026-31431-live-process-code-injection",
"owner": {
"login": "kvakirsanov",
"id": 4203608,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4203608?v=4",
"html_url": "https:\/\/github.com\/kvakirsanov",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kvakirsanov\/CVE-2026-31431-live-process-code-injection",
"description": "CVE-2026-31431 (Copy Fail) — Live Process Code Injection PoC",
"fork": false,
"created_at": "2026-05-01T11:03:58Z",
"updated_at": "2026-05-01T22:22:13Z",
"pushed_at": "2026-05-01T11:46:54Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
{
"id": 1226408847,
"name": "CVE-2026-31431",
"full_name": "TheMalwareGuardian\/CVE-2026-31431",
"owner": {
"login": "TheMalwareGuardian",
"id": 118515671,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118515671?v=4",
"html_url": "https:\/\/github.com\/TheMalwareGuardian",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TheMalwareGuardian\/CVE-2026-31431",
"description": "A structured explanation of CVE-2026-31431 (Copy Fail), connecting the three kernel changes that introduced the vulnerability and enabled its exploitation.",
"fork": false,
"created_at": "2026-05-01T11:06:03Z",
"updated_at": "2026-07-15T07:10:17Z",
"pushed_at": "2026-05-05T10:07:55Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-31431",
"exploit"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226409133,
"name": "CVE-2026-31431",
"full_name": "FrosterDL\/CVE-2026-31431",
"owner": {
"login": "FrosterDL",
"id": 98207639,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98207639?v=4",
"html_url": "https:\/\/github.com\/FrosterDL",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/FrosterDL\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-01T11:06:29Z",
"updated_at": "2026-05-01T11:08:23Z",
"pushed_at": "2026-05-01T11:08:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226411255,
"name": "CVE-2026-31431-Copy-Fail",
"full_name": "RecoFu\/CVE-2026-31431-Copy-Fail",
"owner": {
"login": "RecoFu",
"id": 11173649,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11173649?v=4",
"html_url": "https:\/\/github.com\/RecoFu",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RecoFu\/CVE-2026-31431-Copy-Fail",
"description": null,
"fork": false,
"created_at": "2026-05-01T11:10:06Z",
"updated_at": "2026-05-01T11:12:20Z",
"pushed_at": "2026-05-01T11:12:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226415858,
"name": "block-copyfail",
"full_name": "atgreen\/block-copyfail",
"owner": {
"login": "atgreen",
"id": 89993,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89993?v=4",
"html_url": "https:\/\/github.com\/atgreen",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/atgreen\/block-copyfail",
"description": "BPF LSM blocker for CVE-2026-31431 (Copy Fail) — blocks authencesn AF_ALG binds at runtime without rebooting",
"fork": false,
"created_at": "2026-05-01T11:17:59Z",
"updated_at": "2026-05-10T13:25:01Z",
"pushed_at": "2026-05-07T00:28:50Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 7,
"score": 0,
"subscribers_count": 1
},
{
"id": 1226435950,
"name": "Linux-CopyFail-C-Version-CVE-2026-31431",
"full_name": "beatbeast007\/Linux-CopyFail-C-Version-CVE-2026-31431",
"owner": {
"login": "beatbeast007",
"id": 82287046,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82287046?v=4",
"html_url": "https:\/\/github.com\/beatbeast007",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/beatbeast007\/Linux-CopyFail-C-Version-CVE-2026-31431",
"description": "Clean C version of Copy Fail (CVE-2026-31431) - Linux Local Privilege Escalation exploit using AF_ALG + authencesn + splice primitive. Overwrites the page cache of \/usr\/bin\/su with a tiny setuid shellcode to gain root privileges. Educational proof-of-concept only.",
"fork": false,
"created_at": "2026-05-01T11:51:55Z",
"updated_at": "2026-05-03T03:37:31Z",
"pushed_at": "2026-05-01T14:07:35Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226443181,
"name": "CVE-2026-31431_je_sappelle_RoOt",
"full_name": "sbeteta42\/CVE-2026-31431_je_sappelle_RoOt",
"owner": {
"login": "sbeteta42",
"id": 137415087,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137415087?v=4",
"html_url": "https:\/\/github.com\/sbeteta42",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sbeteta42\/CVE-2026-31431_je_sappelle_RoOt",
"description": "CVE-2026-31431 - Guide de Remédiation et Mesures de Protection",
"fork": false,
"created_at": "2026-05-01T12:03:56Z",
"updated_at": "2026-05-06T09:52:33Z",
"pushed_at": "2026-05-01T13:46:58Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cyber",
"linux",
"pyrhon",
"shell"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226470118,
"name": "CVE-2026-31431",
"full_name": "rvzsec\/CVE-2026-31431",
"owner": {
"login": "rvzsec",
"id": 84989569,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84989569?v=4",
"html_url": "https:\/\/github.com\/rvzsec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/rvzsec\/CVE-2026-31431",
"description": "CVE-2026-31431 - Copy Fail | Linux LPE via authencesn page cache write. Unprivileged user to root on most distros since 2017. PoC in C and Python.",
"fork": false,
"created_at": "2026-05-01T12:47:26Z",
"updated_at": "2026-08-30T12:08:48Z",
"pushed_at": "2026-05-08T12:50:16Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"copyfail",
"cve-2026-31431"
],
"visibility": "public",
"forks": 1,
"watchers": 4,
"score": 0,
"subscribers_count": 1
},
{
"id": 1226473203,
"name": "Copy-Fail---CVE-2026-31431",
"full_name": "Silent0x0\/Copy-Fail---CVE-2026-31431",
"owner": {
"login": "Silent0x0",
"id": 35167044,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35167044?v=4",
"html_url": "https:\/\/github.com\/Silent0x0",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Silent0x0\/Copy-Fail---CVE-2026-31431",
"description": "CVE-2026-31431 \"Copy Fail\" - Analysis and defensive research for the Linux kernel AF_ALG privilege escalation vulnerability affecting all major distributions since 2017. 100% reliable LPE via authencesn logic flaw",
"fork": false,
"created_at": "2026-05-01T12:52:16Z",
"updated_at": "2026-05-01T13:02:43Z",
"pushed_at": "2026-05-01T13:02:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226478063,
"name": "copy_fail",
"full_name": "SpenserCai\/copy_fail",
"owner": {
"login": "SpenserCai",
"id": 25168945,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25168945?v=4",
"html_url": "https:\/\/github.com\/SpenserCai",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SpenserCai\/copy_fail",
"description": "CVE-2026-31431 (Copy Fail) — Rust exploit PoC + eBPF runtime defense. Blocks Linux kernel AF_ALG page-cache LPE without rebooting (LSM\/kprobe dual-mode).",
"fork": false,
"created_at": "2026-05-01T12:59:54Z",
"updated_at": "2026-05-06T09:29:19Z",
"pushed_at": "2026-05-01T14:07:09Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"af-alg",
"copy-fail",
"cve-2026-31431",
"ebpf",
"ebpf-lsm",
"exploit",
"kernel-security",
"kprobe",
"linux-kernel",
"lpe",
"mitigation",
"page-cache",
"privilege-escalation",
"rust",
"security"
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226515882,
"name": "copyfail-audit",
"full_name": "Quaerendir\/copyfail-audit",
"owner": {
"login": "Quaerendir",
"id": 42608192,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42608192?v=4",
"html_url": "https:\/\/github.com\/Quaerendir",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Quaerendir\/copyfail-audit",
"description": "Audit script for CVE-2026-31431 \"Copy Fail\"",
"fork": false,
"created_at": "2026-05-01T13:56:20Z",
"updated_at": "2026-10-01T02:17:53Z",
"pushed_at": "2026-09-26T13:42:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226528504,
"name": "CVE-2026-31431",
"full_name": "povzayd\/CVE-2026-31431",
"owner": {
"login": "povzayd",
"id": 166023703,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/166023703?v=4",
"html_url": "https:\/\/github.com\/povzayd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/povzayd\/CVE-2026-31431",
"description": "Python exploit demonstrating an in‑memory AF_ALG‑based kernel vulnerability on certain Linux kernels. ",
"fork": false,
"created_at": "2026-05-01T14:14:17Z",
"updated_at": "2026-11-02T11:07:20Z",
"pushed_at": "2026-05-01T14:16:41Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226561476,
"name": "cve-checker-2026",
"full_name": "sebinxavi\/cve-checker-2026",
"owner": {
"login": "sebinxavi",
"id": 36552457,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36552457?v=4",
"html_url": "https:\/\/github.com\/sebinxavi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sebinxavi\/cve-checker-2026",
"description": "Multi-OS vulnerability checker for CVE-2026-31431 (Linux kernel) and CVE-2026-41940 (cPanel)",
"fork": false,
"created_at": "2026-05-01T14:59:42Z",
"updated_at": "2026-09-27T17:26:31Z",
"pushed_at": "2026-05-03T00:05:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226572031,
"name": "copy-fail-CVE-2026-31431-mitigation-ansible-playbook",
"full_name": "mlazzarotto\/copy-fail-CVE-2026-31431-mitigation-ansible-playbook",
"owner": {
"login": "mlazzarotto",
"id": 8932945,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8932945?v=4",
"html_url": "https:\/\/github.com\/mlazzarotto",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mlazzarotto\/copy-fail-CVE-2026-31431-mitigation-ansible-playbook",
"description": "An Ansible Playbook to mitigate the vulnerability CVE-2026-31431 on RHEL-based and Debian-based OSes.",
"fork": false,
"created_at": "2026-05-01T15:13:56Z",
"updated_at": "2026-05-01T15:19:34Z",
"pushed_at": "2026-05-01T15:19:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226601265,
"name": "CVE-2026-31431",
"full_name": "ExploitEoom\/CVE-2026-31431",
"owner": {
"login": "ExploitEoom",
"id": 275928483,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/275928483?v=4",
"html_url": "https:\/\/github.com\/ExploitEoom",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ExploitEoom\/CVE-2026-31431",
"description": "CopyFail",
"fork": false,
"created_at": "2026-05-01T15:54:09Z",
"updated_at": "2026-05-01T19:03:33Z",
"pushed_at": "2026-05-01T17:36:04Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226606029,
"name": "CVE-2026-31431-Exploit",
"full_name": "ben-slates\/CVE-2026-31431-Exploit",
"owner": {
"login": "ben-slates",
"id": 122673839,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122673839?v=4",
"html_url": "https:\/\/github.com\/ben-slates",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ben-slates\/CVE-2026-31431-Exploit",
"description": null,
"fork": false,
"created_at": "2026-05-01T16:01:03Z",
"updated_at": "2026-10-10T23:03:09Z",
"pushed_at": "2026-05-01T16:09:42Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226638408,
"name": "copyfail-deconstructed",
"full_name": "bootsareme\/copyfail-deconstructed",
"owner": {
"login": "bootsareme",
"id": 73851560,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73851560?v=4",
"html_url": "https:\/\/github.com\/bootsareme",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bootsareme\/copyfail-deconstructed",
"description": "Easy-to-understand version of CVE-2026-31431",
"fork": false,
"created_at": "2026-05-01T16:48:03Z",
"updated_at": "2026-07-03T20:52:50Z",
"pushed_at": "2026-05-14T14:20:54Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226647484,
"name": "block-copyfail",
"full_name": "mrunalp\/block-copyfail",
"owner": {
"login": "mrunalp",
"id": 53798,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53798?v=4",
"html_url": "https:\/\/github.com\/mrunalp",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mrunalp\/block-copyfail",
"description": "BPF LSM blocker for CVE-2026-31431 (Copy Fail) - zero-reboot remediation for OpenShift 4",
"fork": false,
"created_at": "2026-05-01T17:01:17Z",
"updated_at": "2026-05-04T21:54:12Z",
"pushed_at": "2026-05-04T21:54:07Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226655559,
"name": "Linux-copy-fail-CVE-2026-31431",
"full_name": "1amBa7Man\/Linux-copy-fail-CVE-2026-31431",
"owner": {
"login": "1amBa7Man",
"id": 133025454,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/133025454?v=4",
"html_url": "https:\/\/github.com\/1amBa7Man",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/1amBa7Man\/Linux-copy-fail-CVE-2026-31431",
"description": "Proof-of-concept and technical analysis of CVE-2026-31431 (Copy Fail), a Linux kernel privilege escalation vulnerability affecting page cache integrity.",
"fork": false,
"created_at": "2026-05-01T17:13:14Z",
"updated_at": "2026-05-06T05:19:52Z",
"pushed_at": "2026-05-06T05:19:48Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226662562,
"name": "CopyFail-Experiment",
"full_name": "Lyutoon\/CopyFail-Experiment",
"owner": {
"login": "Lyutoon",
"id": 57178900,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57178900?v=4",
"html_url": "https:\/\/github.com\/Lyutoon",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Lyutoon\/CopyFail-Experiment",
"description": "Fully LLM generated exploit for CVE-2026-31431, written in C",
"fork": false,
"created_at": "2026-05-01T17:23:28Z",
"updated_at": "2026-11-05T07:49:04Z",
"pushed_at": "2026-05-01T17:29:01Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226751063,
"name": "copyfail-dfir",
"full_name": "ledlight33\/copyfail-dfir",
"owner": {
"login": "ledlight33",
"id": 130779050,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130779050?v=4",
"html_url": "https:\/\/github.com\/ledlight33",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ledlight33\/copyfail-dfir",
"description": "Interactive DFIR walkthrough of CVE-2026-31431 (Copy Fail) - from SIEM alert to confirmed verdict. Real Volatility 3 commands, verified methodology.",
"fork": false,
"created_at": "2026-05-01T19:42:36Z",
"updated_at": "2026-10-03T14:21:47Z",
"pushed_at": "2026-10-03T14:21:43Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226752376,
"name": "copyfail",
"full_name": "Smarttfoxx\/copyfail",
"owner": {
"login": "Smarttfoxx",
"id": 140526026,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140526026?v=4",
"html_url": "https:\/\/github.com\/Smarttfoxx",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Smarttfoxx\/copyfail",
"description": "CVE-2026-31431 (Copy Fail) PoC - Linux kernel page cache corruption via authencesn AF_ALG + splice()",
"fork": false,
"created_at": "2026-05-01T19:44:57Z",
"updated_at": "2026-07-06T15:29:22Z",
"pushed_at": "2026-05-12T13:44:11Z",
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 20,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226766008,
"name": "cfDr",
"full_name": "parmstro\/cfDr",
"owner": {
"login": "parmstro",
"id": 5768297,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5768297?v=4",
"html_url": "https:\/\/github.com\/parmstro",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/parmstro\/cfDr",
"description": "Ansible playbook for detecting and remediating CVE-2026-31431 (Copy Fail) - Linux kernel local privilege escalation vulnerability",
"fork": false,
"created_at": "2026-05-01T20:08:28Z",
"updated_at": "2026-05-04T14:48:14Z",
"pushed_at": "2026-05-04T14:47:26Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
{
"id": 1226783387,
"name": "copy_fail",
"full_name": "RoflSecurity\/copy_fail",
"owner": {
"login": "RoflSecurity",
"id": 228405525,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/228405525?v=4",
"html_url": "https:\/\/github.com\/RoflSecurity",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RoflSecurity\/copy_fail",
"description": "CVE-2026-31431",
"fork": false,
"created_at": "2026-05-01T20:37:41Z",
"updated_at": "2026-05-01T22:08:08Z",
"pushed_at": "2026-05-01T22:08:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226789719,
"name": "CopyFail-Exploits-CVE-2026-31431",
"full_name": "Shotafry\/CopyFail-Exploits-CVE-2026-31431",
"owner": {
"login": "Shotafry",
"id": 169939351,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/169939351?v=4",
"html_url": "https:\/\/github.com\/Shotafry",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Shotafry\/CopyFail-Exploits-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-01T20:49:56Z",
"updated_at": "2026-06-14T08:07:27Z",
"pushed_at": "2026-05-01T22:34:31Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226838149,
"name": "CVE-2026-31431-PoC",
"full_name": "glask1d\/CVE-2026-31431-PoC",
"owner": {
"login": "glask1d",
"id": 196465697,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/196465697?v=4",
"html_url": "https:\/\/github.com\/glask1d",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/glask1d\/CVE-2026-31431-PoC",
"description": "Vibecoded PoC for CVE-2026-31431",
"fork": false,
"created_at": "2026-05-01T22:12:58Z",
"updated_at": "2026-05-01T22:14:19Z",
"pushed_at": "2026-05-01T22:14:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226857673,
"name": "copyfailscan",
"full_name": "monobrau\/copyfailscan",
"owner": {
"login": "monobrau",
"id": 52116222,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52116222?v=4",
"html_url": "https:\/\/github.com\/monobrau",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/monobrau\/copyfailscan",
"description": "SSH posture helper for CVE-2026-31431 (Copy Fail): kernel and algif_aead inventory",
"fork": false,
"created_at": "2026-05-01T22:54:44Z",
"updated_at": "2026-06-11T00:03:25Z",
"pushed_at": "2026-06-11T00:03:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226879619,
"name": "copy-fail-zig",
"full_name": "Emmmmllll\/copy-fail-zig",
"owner": {
"login": "Emmmmllll",
"id": 62700851,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62700851?v=4",
"html_url": "https:\/\/github.com\/Emmmmllll",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Emmmmllll\/copy-fail-zig",
"description": "Zig implementation of the Copy Fail Linux LPE (CVE-2026-31431) https:\/\/copy.fail for security-research and defensive-detection purposes",
"fork": false,
"created_at": "2026-05-01T23:42:56Z",
"updated_at": "2026-06-11T13:27:31Z",
"pushed_at": "2026-05-02T13:06:59Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"af-alg",
"copy-fail",
"cross-platform",
"cve-2026-31431",
"exploit",
"kernel-exploit",
"linux-kernel",
"local-privilege-escalation",
"privilege-escalation",
"proof-of-concept",
"security-research",
"zig"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226909664,
"name": "fix_CVE-2026-31431",
"full_name": "kdjnb\/fix_CVE-2026-31431",
"owner": {
"login": "kdjnb",
"id": 179589276,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179589276?v=4",
"html_url": "https:\/\/github.com\/kdjnb",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kdjnb\/fix_CVE-2026-31431",
"description": "破坏CVE-2026-31431所需的漏洞组件，从而达到无法通过CVE-2026-31431提权。",
"fork": false,
"created_at": "2026-05-02T00:55:01Z",
"updated_at": "2026-05-02T01:05:25Z",
"pushed_at": "2026-05-02T01:05:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226935074,
"name": "copy-fail-CVE-2026-31431-poc",
"full_name": "euriconicacio\/copy-fail-CVE-2026-31431-poc",
"owner": {
"login": "euriconicacio",
"id": 5957301,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5957301?v=4",
"html_url": "https:\/\/github.com\/euriconicacio",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/euriconicacio\/copy-fail-CVE-2026-31431-poc",
"description": null,
"fork": false,
"created_at": "2026-05-02T02:00:17Z",
"updated_at": "2026-08-12T08:59:52Z",
"pushed_at": "2026-05-02T02:13:09Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226941225,
"name": "modrosnlr5",
"full_name": "ROSNLR5\/modrosnlr5",
"owner": {
"login": "ROSNLR5",
"id": 281082471,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/281082471?v=4",
"html_url": "https:\/\/github.com\/ROSNLR5",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ROSNLR5\/modrosnlr5",
"description": "Linux Kernel LPE PoC (CVE-2026-31431)",
"fork": false,
"created_at": "2026-05-02T02:15:42Z",
"updated_at": "2026-05-08T14:56:02Z",
"pushed_at": "2026-05-08T14:55:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226956768,
"name": "CVE-2026-31431",
"full_name": "TheMursalin\/CVE-2026-31431",
"owner": {
"login": "TheMursalin",
"id": 210463756,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/210463756?v=4",
"html_url": "https:\/\/github.com\/TheMursalin",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TheMursalin\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-02T02:54:05Z",
"updated_at": "2026-05-02T03:11:51Z",
"pushed_at": "2026-05-02T03:11:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226964803,
"name": "CVE-2026-31431-Container-Escape",
"full_name": "qi4L\/CVE-2026-31431-Container-Escape",
"owner": {
"login": "qi4L",
"id": 75202638,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75202638?v=4",
"html_url": "https:\/\/github.com\/qi4L",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/qi4L\/CVE-2026-31431-Container-Escape",
"description": "CVE-2026-31431 容器逃逸",
"fork": false,
"created_at": "2026-05-02T03:13:02Z",
"updated_at": "2026-10-13T19:10:28Z",
"pushed_at": "2026-05-02T03:20:36Z",
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 27,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227010525,
"name": "CVE-2026-31431",
"full_name": "moaaz-mostafa123\/CVE-2026-31431",
"owner": {
"login": "moaaz-mostafa123",
"id": 81266377,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81266377?v=4",
"html_url": "https:\/\/github.com\/moaaz-mostafa123",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/moaaz-mostafa123\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-02T04:59:37Z",
"updated_at": "2026-05-02T05:13:24Z",
"pushed_at": "2026-05-02T05:13:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227031225,
"name": "CVE-2026-31431",
"full_name": "malwarekid\/CVE-2026-31431",
"owner": {
"login": "malwarekid",
"id": 91931069,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91931069?v=4",
"html_url": "https:\/\/github.com\/malwarekid",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/malwarekid\/CVE-2026-31431",
"description": "CopyFail is a proof-of-concept exploit for CVE-2026-31431, targeting a memory corruption vulnerability in the Linux Kernel Crypto API (`AF_ALG`). The exploit leverages the `splice` system call to perform unauthorized page-cache patching of the `\/usr\/bin\/su` binary, enabling a password-less escalation to root.",
"fork": false,
"created_at": "2026-05-02T05:44:02Z",
"updated_at": "2026-05-29T01:34:08Z",
"pushed_at": "2026-05-02T06:04:26Z",
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227035461,
"name": "CVE-2026-31431",
"full_name": "xd20111\/CVE-2026-31431",
"owner": {
"login": "xd20111",
"id": 34960106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34960106?v=4",
"html_url": "https:\/\/github.com\/xd20111",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xd20111\/CVE-2026-31431",
"description": "CVE-2026-31431 Copy Fail - Local Privilege Escalation in the Linux kernel's authencesn cryptographic template via AF_ALG + splice()",
"fork": false,
"created_at": "2026-05-02T05:52:41Z",
"updated_at": "2026-05-02T05:57:47Z",
"pushed_at": "2026-05-02T05:56:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227067224,
"name": "copy-fail-CVE-2026-31431-php",
"full_name": "MartinPham\/copy-fail-CVE-2026-31431-php",
"owner": {
"login": "MartinPham",
"id": 2064515,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2064515?v=4",
"html_url": "https:\/\/github.com\/MartinPham",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MartinPham\/copy-fail-CVE-2026-31431-php",
"description": "CVE-2026-31431 (Copy Fail) PHP PoC",
"fork": false,
"created_at": "2026-05-02T06:42:33Z",
"updated_at": "2026-05-04T07:14:52Z",
"pushed_at": "2026-05-02T07:31:00Z",
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227083228,
"name": "CVE-2026-31431-Report-Copy-fail-Vulnerability-",
"full_name": "krish-foren6\/CVE-2026-31431-Report-Copy-fail-Vulnerability-",
"owner": {
"login": "krish-foren6",
"id": 146321356,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146321356?v=4",
"html_url": "https:\/\/github.com\/krish-foren6",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/krish-foren6\/CVE-2026-31431-Report-Copy-fail-Vulnerability-",
"description": "Detailed analysis of the Copy Fail vulnerability (CVE-2026-31431) in the Linux kernel, including memory corruption mechanism, privilege escalation flow, and security impact.",
"fork": false,
"created_at": "2026-05-02T07:13:38Z",
"updated_at": "2026-05-02T08:39:57Z",
"pushed_at": "2026-05-02T07:37:36Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227100100,
"name": "Copy-Fail-CVE-2026-31431-modernized",
"full_name": "EynaExp\/Copy-Fail-CVE-2026-31431-modernized",
"owner": {
"login": "EynaExp",
"id": 59816538,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59816538?v=4",
"html_url": "https:\/\/github.com\/EynaExp",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/EynaExp\/Copy-Fail-CVE-2026-31431-modernized",
"description": "A modernized version of Copy Fail PE",
"fork": false,
"created_at": "2026-05-02T07:46:28Z",
"updated_at": "2026-08-25T07:56:01Z",
"pushed_at": "2026-05-02T07:50:43Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227109810,
"name": "copyfail-CVE-2026-31431",
"full_name": "Trex1e\/copyfail-CVE-2026-31431",
"owner": {
"login": "Trex1e",
"id": 189212478,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/189212478?v=4",
"html_url": "https:\/\/github.com\/Trex1e",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Trex1e\/copyfail-CVE-2026-31431",
"description": "Original repo: https:\/\/github.com\/theori-io\/copy-fail-CVE-2026-31431",
"fork": false,
"created_at": "2026-05-02T08:05:51Z",
"updated_at": "2026-05-09T01:55:48Z",
"pushed_at": "2026-05-02T08:35:03Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227157867,
"name": "CVE-2026-31431-copyfail-rs",
"full_name": "KanbaraAkihito\/CVE-2026-31431-copyfail-rs",
"owner": {
"login": "KanbaraAkihito",
"id": 45653436,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45653436?v=4",
"html_url": "https:\/\/github.com\/KanbaraAkihito",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/KanbaraAkihito\/CVE-2026-31431-copyfail-rs",
"description": null,
"fork": false,
"created_at": "2026-05-02T09:37:50Z",
"updated_at": "2026-10-13T19:10:28Z",
"pushed_at": "2026-05-06T04:19:32Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227166041,
"name": "CVE-2026-31431-mitigation-suite",
"full_name": "mahdi13830510\/CVE-2026-31431-mitigation-suite",
"owner": {
"login": "mahdi13830510",
"id": 140939231,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140939231?v=4",
"html_url": "https:\/\/github.com\/mahdi13830510",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mahdi13830510\/CVE-2026-31431-mitigation-suite",
"description": "A defensive security toolkit specifically engineered to detect and mitigate CVE-2026-31431 and similar nftables \/ AF_ALG vulnerabilities. Includes non-destructive behavioral probes, module blacklisting automation, and Auditd\/eBPF rules for real-time threat detection.",
"fork": false,
"created_at": "2026-05-02T09:52:46Z",
"updated_at": "2026-05-02T12:50:02Z",
"pushed_at": "2026-05-02T10:12:07Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"ansible",
"audit",
"cve",
"cve-2026-31431",
"ebpf",
"exploit",
"linux-kernel",
"tookit",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227182141,
"name": "CVE-2026-31431",
"full_name": "suominen\/CVE-2026-31431",
"owner": {
"login": "suominen",
"id": 1939855,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1939855?v=4",
"html_url": "https:\/\/github.com\/suominen",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/suominen\/CVE-2026-31431",
"description": "Tracking Copy Fail (CVE-2026-31431), the Linux algif_aead privilege escalation",
"fork": false,
"created_at": "2026-05-02T10:22:01Z",
"updated_at": "2026-08-01T22:08:10Z",
"pushed_at": "2026-08-01T22:08:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"linux",
"security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227193369,
"name": "copy-fail-CVE-2026-31431",
"full_name": "mmionf\/copy-fail-CVE-2026-31431",
"owner": {
"login": "mmionf",
"id": 86910496,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86910496?v=4",
"html_url": "https:\/\/github.com\/mmionf",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mmionf\/copy-fail-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-02T10:42:52Z",
"updated_at": "2026-05-02T10:45:34Z",
"pushed_at": "2026-05-02T10:45:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227199755,
"name": "cpp-CVE-2026-31431",
"full_name": "cxwx\/cpp-CVE-2026-31431",
"owner": {
"login": "cxwx",
"id": 6235641,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6235641?v=4",
"html_url": "https:\/\/github.com\/cxwx",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cxwx\/cpp-CVE-2026-31431",
"description": "CVE-2026-31431 cpp version for x86_64",
"fork": false,
"created_at": "2026-05-02T10:54:05Z",
"updated_at": "2026-05-02T10:55:35Z",
"pushed_at": "2026-05-02T10:54:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-31431",
"cve-2026-31431-lpe-exploit",
"cve-2026-31431-poc"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227305043,
"name": "autorootlinux",
"full_name": "Huchangzhi\/autorootlinux",
"owner": {
"login": "Huchangzhi",
"id": 138838812,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/138838812?v=4",
"html_url": "https:\/\/github.com\/Huchangzhi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Huchangzhi\/autorootlinux",
"description": "基于CVE-2026-31431的自动root脚本",
"fork": false,
"created_at": "2026-05-02T13:53:49Z",
"updated_at": "2026-05-26T14:37:52Z",
"pushed_at": "2026-05-02T14:58:49Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227316319,
"name": "CVE-2026-31431-PoC",
"full_name": "Sl4cK0TH\/CVE-2026-31431-PoC",
"owner": {
"login": "Sl4cK0TH",
"id": 190696389,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190696389?v=4",
"html_url": "https:\/\/github.com\/Sl4cK0TH",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Sl4cK0TH\/CVE-2026-31431-PoC",
"description": null,
"fork": false,
"created_at": "2026-05-02T14:12:06Z",
"updated_at": "2026-07-05T14:02:53Z",
"pushed_at": "2026-05-02T15:10:46Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227324637,
"name": "CVE-2026-31431",
"full_name": "pulentoski\/CVE-2026-31431",
"owner": {
"login": "pulentoski",
"id": 60004847,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60004847?v=4",
"html_url": "https:\/\/github.com\/pulentoski",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pulentoski\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-02T14:25:12Z",
"updated_at": "2026-10-15T23:39:09Z",
"pushed_at": "2026-05-03T00:07:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227335079,
"name": "ansible-role-cve-2026-31431",
"full_name": "joltcan\/ansible-role-cve-2026-31431",
"owner": {
"login": "joltcan",
"id": 537157,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/537157?v=4",
"html_url": "https:\/\/github.com\/joltcan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/joltcan\/ansible-role-cve-2026-31431",
"description": "Ansible role: CVE-2026-31431 (Copy Fail) modprobe.d mitigation — disables algif_aead",
"fork": false,
"created_at": "2026-05-02T14:41:08Z",
"updated_at": "2026-05-06T14:53:13Z",
"pushed_at": "2026-05-06T14:34:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227348507,
"name": "copy-fail-mcp",
"full_name": "sandraschi\/copy-fail-mcp",
"owner": {
"login": "sandraschi",
"id": 34750307,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34750307?v=4",
"html_url": "https:\/\/github.com\/sandraschi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sandraschi\/copy-fail-mcp",
"description": "CVE-2026-31431 Copy Fail — Linux kernel LPE tester via MCP",
"fork": false,
"created_at": "2026-05-02T15:01:41Z",
"updated_at": "2026-10-29T19:34:55Z",
"pushed_at": "2026-10-29T19:34:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"clipboard",
"copy",
"fastmcp",
"mcp",
"python"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227370290,
"name": "CVE-2026-31431",
"full_name": "Gr-1m\/CVE-2026-31431",
"owner": {
"login": "Gr-1m",
"id": 57427356,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57427356?v=4",
"html_url": "https:\/\/github.com\/Gr-1m",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Gr-1m\/CVE-2026-31431",
"description": "Copyfail (CVE-2026-31431) exp rewrite by Golang",
"fork": false,
"created_at": "2026-05-02T15:35:03Z",
"updated_at": "2026-05-10T13:38:42Z",
"pushed_at": "2026-05-02T15:54:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227435621,
"name": "copyfail-guard",
"full_name": "ctzisme\/copyfail-guard",
"owner": {
"login": "ctzisme",
"id": 190759691,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190759691?v=4",
"html_url": "https:\/\/github.com\/ctzisme",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ctzisme\/copyfail-guard",
"description": "Detect and mitigate CVE-2026-31431 (Copy Fail) on Linux systems.",
"fork": false,
"created_at": "2026-05-02T17:20:10Z",
"updated_at": "2026-05-15T10:23:34Z",
"pushed_at": "2026-05-05T13:50:55Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"copy-fail",
"cve",
"cve-2026-31431",
"kernel",
"linux",
"python",
"security"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227488075,
"name": "Copy-Fail-Exploit-CVE-2026-31431",
"full_name": "CybroZeus\/Copy-Fail-Exploit-CVE-2026-31431",
"owner": {
"login": "CybroZeus",
"id": 218828197,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/218828197?v=4",
"html_url": "https:\/\/github.com\/CybroZeus",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/CybroZeus\/Copy-Fail-Exploit-CVE-2026-31431",
"description": "Copy Fail (CVE-2026-31431) is a Linux LPE vulnerability in the kernel crypto API via AF_ALG. It allows unprivileged users to overwrite page cache data of SUID binaries (e.g., \/usr\/bin\/su), gaining root access.",
"fork": false,
"created_at": "2026-05-02T18:51:21Z",
"updated_at": "2026-05-02T18:55:09Z",
"pushed_at": "2026-05-02T18:51:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227582535,
"name": "copy-fail-CVE-2026-31431-Python-Golfing",
"full_name": "AvPrince26\/copy-fail-CVE-2026-31431-Python-Golfing",
"owner": {
"login": "AvPrince26",
"id": 129117596,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/129117596?v=4",
"html_url": "https:\/\/github.com\/AvPrince26",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AvPrince26\/copy-fail-CVE-2026-31431-Python-Golfing",
"description": "Golf Challenge for https:\/\/copy.golf\/ ",
"fork": false,
"created_at": "2026-05-02T22:10:37Z",
"updated_at": "2026-05-05T14:18:37Z",
"pushed_at": "2026-05-05T14:16:41Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227606657,
"name": "copy-fail",
"full_name": "pedromizz\/copy-fail",
"owner": {
"login": "pedromizz",
"id": 225228305,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225228305?v=4",
"html_url": "https:\/\/github.com\/pedromizz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pedromizz\/copy-fail",
"description": "PoC of CVE-2026-31431",
"fork": false,
"created_at": "2026-05-02T23:12:23Z",
"updated_at": "2026-06-29T19:57:49Z",
"pushed_at": "2026-05-02T23:18:56Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227632844,
"name": "copy-fail-CVE-2026-31431",
"full_name": "astounds\/copy-fail-CVE-2026-31431",
"owner": {
"login": "astounds",
"id": 115191136,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115191136?v=4",
"html_url": "https:\/\/github.com\/astounds",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/astounds\/copy-fail-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-03T00:24:12Z",
"updated_at": "2026-05-03T00:24:57Z",
"pushed_at": "2026-05-03T00:24:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227638235,
"name": "copy-fail-check",
"full_name": "jbnetwork-git\/copy-fail-check",
"owner": {
"login": "jbnetwork-git",
"id": 95324308,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95324308?v=4",
"html_url": "https:\/\/github.com\/jbnetwork-git",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jbnetwork-git\/copy-fail-check",
"description": "CVE-2026-31431 Helper basado en https:\/\/copy.fail\/",
"fork": false,
"created_at": "2026-05-03T00:39:17Z",
"updated_at": "2026-10-25T03:06:39Z",
"pushed_at": "2026-05-03T02:23:33Z",
"stargazers_count": 39,
"watchers_count": 39,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 39,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227669440,
"name": "CVE-2026-31431-REVSHELL",
"full_name": "danimrtzp\/CVE-2026-31431-REVSHELL",
"owner": {
"login": "danimrtzp",
"id": 190214060,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190214060?v=4",
"html_url": "https:\/\/github.com\/danimrtzp",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/danimrtzp\/CVE-2026-31431-REVSHELL",
"description": null,
"fork": false,
"created_at": "2026-05-03T02:08:12Z",
"updated_at": "2026-05-03T02:24:19Z",
"pushed_at": "2026-05-03T02:24:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227680438,
"name": "copy-fail-CVE-2026-31431",
"full_name": "pyroceper\/copy-fail-CVE-2026-31431",
"owner": {
"login": "pyroceper",
"id": 96410314,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96410314?v=4",
"html_url": "https:\/\/github.com\/pyroceper",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pyroceper\/copy-fail-CVE-2026-31431",
"description": "CopyFail PoC in C",
"fork": false,
"created_at": "2026-05-03T02:37:39Z",
"updated_at": "2026-10-12T08:55:50Z",
"pushed_at": "2026-05-03T03:02:51Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"af-alg",
"copy-fail",
"cve-2026-31431",
"exploit",
"linux-kernel",
"no-shellcode",
"passwd",
"privilege-escalation",
"proof-of-concept",
"security-research"
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227725147,
"name": "cve-2026-31431-check",
"full_name": "ForensicFoundry\/cve-2026-31431-check",
"owner": {
"login": "ForensicFoundry",
"id": 215286111,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215286111?v=4",
"html_url": "https:\/\/github.com\/ForensicFoundry",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ForensicFoundry\/cve-2026-31431-check",
"description": "Check local Linux mitigation\/exposure status for CVE-2026-31431 \"Copy Fail\"",
"fork": false,
"created_at": "2026-05-03T04:37:22Z",
"updated_at": "2026-05-03T05:30:49Z",
"pushed_at": "2026-05-03T05:25:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"af-alg",
"algif-aead",
"copy-f",
"cve-2026-31431",
"debian",
"incident-response",
"privilege-escalation",
"ubuntu",
"vulnerability",
"vulnerability-detection"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227820896,
"name": "CVE-2026-31431",
"full_name": "vyahello\/CVE-2026-31431",
"owner": {
"login": "vyahello",
"id": 30525728,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30525728?v=4",
"html_url": "https:\/\/github.com\/vyahello",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/vyahello\/CVE-2026-31431",
"description": "🚨 Linux local privilege escalation PoC for CVE-2026-31431",
"fork": false,
"created_at": "2026-05-03T07:55:28Z",
"updated_at": "2026-06-16T19:06:29Z",
"pushed_at": "2026-05-03T08:20:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228003575,
"name": "cve-2026-31431-checker",
"full_name": "sibersan\/cve-2026-31431-checker",
"owner": {
"login": "sibersan",
"id": 6860703,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6860703?v=4",
"html_url": "https:\/\/github.com\/sibersan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sibersan\/cve-2026-31431-checker",
"description": "Detection tool for CVE-2026-31431 Copy Fail vulnerability in Linux kernels. Detection only - does not exploit.",
"fork": false,
"created_at": "2026-05-03T13:14:43Z",
"updated_at": "2026-05-03T13:45:06Z",
"pushed_at": "2026-05-03T13:45:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228016894,
"name": "copy-fail-rs",
"full_name": "ncmprbll\/copy-fail-rs",
"owner": {
"login": "ncmprbll",
"id": 106642017,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106642017?v=4",
"html_url": "https:\/\/github.com\/ncmprbll",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ncmprbll\/copy-fail-rs",
"description": "CVE-2026-31431",
"fork": false,
"created_at": "2026-05-03T13:36:06Z",
"updated_at": "2026-05-04T19:00:53Z",
"pushed_at": "2026-05-04T19:00:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228024051,
"name": "Weekly-Breach-Investigation--006",
"full_name": "jamal-soc21\/Weekly-Breach-Investigation--006",
"owner": {
"login": "jamal-soc21",
"id": 266522413,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/266522413?v=4",
"html_url": "https:\/\/github.com\/jamal-soc21",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jamal-soc21\/Weekly-Breach-Investigation--006",
"description": "Repository documenting the Copy Fail (CVE-2026-31431) Linux kernel vulnerability, a local privilege escalation flaw enabling root access and mapped to MITRE ATT&CK techniques.",
"fork": false,
"created_at": "2026-05-03T13:47:08Z",
"updated_at": "2026-07-08T23:52:37Z",
"pushed_at": "2026-05-03T13:49:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228070815,
"name": "CVE-2026-31431",
"full_name": "tfawnies\/CVE-2026-31431",
"owner": {
"login": "tfawnies",
"id": 278915334,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/278915334?v=4",
"html_url": "https:\/\/github.com\/tfawnies",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tfawnies\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-03T14:57:49Z",
"updated_at": "2026-05-03T15:14:32Z",
"pushed_at": "2026-05-03T15:01:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228080038,
"name": "copy-fail-CVE-2026-31431",
"full_name": "ravindercodes\/copy-fail-CVE-2026-31431",
"owner": {
"login": "ravindercodes",
"id": 83815874,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83815874?v=4",
"html_url": "https:\/\/github.com\/ravindercodes",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ravindercodes\/copy-fail-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-03T15:11:43Z",
"updated_at": "2026-05-04T08:37:28Z",
"pushed_at": "2026-05-04T08:37:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228082092,
"name": "CopyFail-for-dummies",
"full_name": "ChernStepanov\/CopyFail-for-dummies",
"owner": {
"login": "ChernStepanov",
"id": 104476092,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104476092?v=4",
"html_url": "https:\/\/github.com\/ChernStepanov",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ChernStepanov\/CopyFail-for-dummies",
"description": "A tiny explanation + PoC for CVE-2026-31431",
"fork": false,
"created_at": "2026-05-03T15:14:54Z",
"updated_at": "2026-05-03T19:57:38Z",
"pushed_at": "2026-05-03T19:57:34Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228221745,
"name": "CVE-2026-31431",
"full_name": "kaleth4\/CVE-2026-31431",
"owner": {
"login": "kaleth4",
"id": 216897593,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216897593?v=4",
"html_url": "https:\/\/github.com\/kaleth4",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kaleth4\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-03T18:51:34Z",
"updated_at": "2026-05-03T19:02:49Z",
"pushed_at": "2026-05-03T19:02:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228223117,
"name": "CVE-2026-31431",
"full_name": "mCub3\/CVE-2026-31431",
"owner": {
"login": "mCub3",
"id": 23475087,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23475087?v=4",
"html_url": "https:\/\/github.com\/mCub3",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mCub3\/CVE-2026-31431",
"description": "CVE-2026-31431 (Copy Fail) – unprivileged root via AF_ALG page cache corruption. C PoC.",
"fork": false,
"created_at": "2026-05-03T18:53:48Z",
"updated_at": "2026-05-03T19:28:56Z",
"pushed_at": "2026-05-03T19:28:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228239811,
"name": "copyfail-guard",
"full_name": "juliosuas\/copyfail-guard",
"owner": {
"login": "juliosuas",
"id": 5745504,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5745504?v=4",
"html_url": "https:\/\/github.com\/juliosuas",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/juliosuas\/copyfail-guard",
"description": "Fast, auditable Linux mitigation for CVE-2026-31431 Copy Fail: algif_aead block, verification, and AF_ALG seccomp hardening.",
"fork": false,
"created_at": "2026-05-03T19:22:37Z",
"updated_at": "2026-09-09T08:04:32Z",
"pushed_at": "2026-09-09T08:02:27Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"af-alg",
"container-security",
"copy-fail",
"cve",
"cve-2026-31431",
"devsecops",
"docker-security",
"incident-response",
"kernel-hardening",
"kubernetes-security",
"linux",
"linux-kernel",
"seccomp",
"security",
"sysadmin"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228322827,
"name": "copyfail-check",
"full_name": "codesource\/copyfail-check",
"owner": {
"login": "codesource",
"id": 1862276,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1862276?v=4",
"html_url": "https:\/\/github.com\/codesource",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/codesource\/copyfail-check",
"description": "Archived, moved to codesource\/cve-check. Shell script to detect CVE-2026-31431 (Copy Fail) exposure and mitigations on Linux systems: kernel check, module state, boot params, AF_ALG reachability, and distro patch status.",
"fork": false,
"created_at": "2026-05-03T22:04:33Z",
"updated_at": "2026-10-21T21:37:34Z",
"pushed_at": "2026-10-21T21:37:29Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228380419,
"name": "CVE-2026-31431_CopyFail_LinuxKernel_LPE",
"full_name": "xn0kkx\/CVE-2026-31431_CopyFail_LinuxKernel_LPE",
"owner": {
"login": "xn0kkx",
"id": 75689046,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75689046?v=4",
"html_url": "https:\/\/github.com\/xn0kkx",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xn0kkx\/CVE-2026-31431_CopyFail_LinuxKernel_LPE",
"description": "Educational rewrite of the Copy Fail PoC (CVE-2026-31431) — Linux kernel LPE via algif_aead in-place crypto + splice() page-cache write",
"fork": false,
"created_at": "2026-05-04T00:28:27Z",
"updated_at": "2026-05-12T13:03:02Z",
"pushed_at": "2026-05-04T02:02:52Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"copy-fail",
"cve-2026-31431",
"educational",
"exploit",
"linux-kernel",
"lpe",
"security-research"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228455546,
"name": "CVE-2026-31431",
"full_name": "MetaspIoit\/CVE-2026-31431",
"owner": {
"login": "MetaspIoit",
"id": 56143890,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56143890?v=4",
"html_url": "https:\/\/github.com\/MetaspIoit",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MetaspIoit\/CVE-2026-31431",
"description": "\"Copy Fail\" privilege escalation",
"fork": false,
"created_at": "2026-05-04T03:15:07Z",
"updated_at": "2026-05-04T08:10:38Z",
"pushed_at": "2026-05-04T03:17:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228476487,
"name": "BigFix-CopyFail-AlmaLinux-Content",
"full_name": "kvendler\/BigFix-CopyFail-AlmaLinux-Content",
"owner": {
"login": "kvendler",
"id": 138081317,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/138081317?v=4",
"html_url": "https:\/\/github.com\/kvendler",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kvendler\/BigFix-CopyFail-AlmaLinux-Content",
"description": "This repository contains BigFix Content that I created for identifying the AlmaLinux systems that require patching to remediate CVE-2026-31431",
"fork": false,
"created_at": "2026-05-04T03:56:24Z",
"updated_at": "2026-05-04T04:01:18Z",
"pushed_at": "2026-05-04T04:01:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228502015,
"name": "CopyFail-Penguin",
"full_name": "chavezvic\/CopyFail-Penguin",
"owner": {
"login": "chavezvic",
"id": 59758391,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59758391?v=4",
"html_url": "https:\/\/github.com\/chavezvic",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/chavezvic\/CopyFail-Penguin",
"description": "A safe Linux checker for CopyFail\/CVE-2026-31431 that reviews kernel version, update status, reboot status, and algif_aead exposure indicators.",
"fork": false,
"created_at": "2026-05-04T04:47:31Z",
"updated_at": "2026-05-04T04:48:50Z",
"pushed_at": "2026-05-04T04:48:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228525111,
"name": "copy-fail-checker",
"full_name": "samanzamani\/copy-fail-checker",
"owner": {
"login": "samanzamani",
"id": 24776416,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24776416?v=4",
"html_url": "https:\/\/github.com\/samanzamani",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/samanzamani\/copy-fail-checker",
"description": "Read-only Bash checker for the Copy Fail Linux kernel vulnerability (CVE-2026-31431)",
"fork": false,
"created_at": "2026-05-04T05:30:03Z",
"updated_at": "2026-07-28T16:52:10Z",
"pushed_at": "2026-05-23T06:07:32Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228541987,
"name": "copy-fail-CVE-2026-31431-detection-probe",
"full_name": "ochebotar\/copy-fail-CVE-2026-31431-detection-probe",
"owner": {
"login": "ochebotar",
"id": 29620975,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29620975?v=4",
"html_url": "https:\/\/github.com\/ochebotar",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ochebotar\/copy-fail-CVE-2026-31431-detection-probe",
"description": "Safe detection tooling for CVE-2026-31431 \"Copy Fail\" and CVE-2026-43284 \"Dirty Frag\" — a local privilege escalation in the Linux kernel's algif_aead module affecting all major distributions since 2017.",
"fork": false,
"created_at": "2026-05-04T05:58:50Z",
"updated_at": "2026-11-01T11:39:07Z",
"pushed_at": "2026-05-18T12:37:20Z",
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228620276,
"name": "copy-fail-CVE-2026-31431-shell",
"full_name": "g1nt0n1x\/copy-fail-CVE-2026-31431-shell",
"owner": {
"login": "g1nt0n1x",
"id": 249065598,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249065598?v=4",
"html_url": "https:\/\/github.com\/g1nt0n1x",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/g1nt0n1x\/copy-fail-CVE-2026-31431-shell",
"description": "PoC shell exploit for CVE-2026-31431 (copy_fail) — Linux LPE via AF_ALG + splice page-cache overwrite. Single-shot, no race condition, kernel 4.9–6.18.",
"fork": false,
"created_at": "2026-05-04T07:53:33Z",
"updated_at": "2026-08-06T13:28:24Z",
"pushed_at": "2026-05-04T07:55:53Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228656915,
"name": "RK35xx-CopyFail-Hotfix",
"full_name": "Qengineering\/RK35xx-CopyFail-Hotfix",
"owner": {
"login": "Qengineering",
"id": 44409029,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44409029?v=4",
"html_url": "https:\/\/github.com\/Qengineering",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Qengineering\/RK35xx-CopyFail-Hotfix",
"description": "RK35xx CopyFail Hotfix: CVE-2026-31431 Patch for Ubuntu 24.04",
"fork": false,
"created_at": "2026-05-04T08:32:59Z",
"updated_at": "2026-06-18T13:53:58Z",
"pushed_at": "2026-05-04T09:54:42Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"radxa-boards",
"ubuntu2404"
],
"visibility": "public",
"forks": 2,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228682739,
"name": "CVE-2026-31431_Kernel_Checker",
"full_name": "ShahaB108\/CVE-2026-31431_Kernel_Checker",
"owner": {
"login": "ShahaB108",
"id": 119882837,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119882837?v=4",
"html_url": "https:\/\/github.com\/ShahaB108",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ShahaB108\/CVE-2026-31431_Kernel_Checker",
"description": "checking if kernel is VULNERABLE",
"fork": false,
"created_at": "2026-05-04T09:07:38Z",
"updated_at": "2026-05-05T07:47:34Z",
"pushed_at": "2026-05-05T07:47:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228708687,
"name": "cve-2026-31431",
"full_name": "vasyapokemon\/cve-2026-31431",
"owner": {
"login": "vasyapokemon",
"id": 30440966,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30440966?v=4",
"html_url": "https:\/\/github.com\/vasyapokemon",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/vasyapokemon\/cve-2026-31431",
"description": "CVE-2026-31431 Copy Fail: Linux kernel algif_aead LPE — research, detection tooling, YARA rules, and patching guide",
"fork": false,
"created_at": "2026-05-04T09:42:28Z",
"updated_at": "2026-05-04T09:42:29Z",
"pushed_at": "2026-05-02T21:15:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228713671,
"name": "copyfail-exploit",
"full_name": "xeloxa\/copyfail-exploit",
"owner": {
"login": "xeloxa",
"id": 173461547,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/173461547?v=4",
"html_url": "https:\/\/github.com\/xeloxa",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xeloxa\/copyfail-exploit",
"description": "Copy Fail (CVE-2026-31431) LPE exploit. A clean, multi-arch Python reimplementation targeting the Linux kernel AF_ALG page cache vulnerability.",
"fork": false,
"created_at": "2026-05-04T09:48:59Z",
"updated_at": "2026-11-06T04:24:38Z",
"pushed_at": "2026-05-05T07:01:53Z",
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"af-alg",
"copy-fail",
"cve-2026-31431",
"exploit",
"linux-kernel",
"lpe",
"privilege-escalation",
"security-research",
"xint",
"zeroday"
],
"visibility": "public",
"forks": 6,
"watchers": 35,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228787321,
"name": "cve-2026-31431",
"full_name": "Mrhudson69\/cve-2026-31431",
"owner": {
"login": "Mrhudson69",
"id": 78916631,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78916631?v=4",
"html_url": "https:\/\/github.com\/Mrhudson69",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Mrhudson69\/cve-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-04T11:30:32Z",
"updated_at": "2026-05-08T08:20:40Z",
"pushed_at": "2026-05-08T08:20:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228865198,
"name": "Mitigaciones",
"full_name": "net0bsd\/Mitigaciones",
"owner": {
"login": "net0bsd",
"id": 6826252,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6826252?v=4",
"html_url": "https:\/\/github.com\/net0bsd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/net0bsd\/Mitigaciones",
"description": "Mitigacion del CVE-2026-31431 BASH",
"fork": false,
"created_at": "2026-05-04T13:09:07Z",
"updated_at": "2026-05-05T19:19:08Z",
"pushed_at": "2026-05-05T19:19:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228903831,
"name": "play-go-copy-fail-cve-2026-31431",
"full_name": "imkk000\/play-go-copy-fail-cve-2026-31431",
"owner": {
"login": "imkk000",
"id": 15193133,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15193133?v=4",
"html_url": "https:\/\/github.com\/imkk000",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/imkk000\/play-go-copy-fail-cve-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-04T13:52:54Z",
"updated_at": "2026-05-05T01:19:31Z",
"pushed_at": "2026-05-05T01:19:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229003543,
"name": "CVE-2026-31431-mitigacion",
"full_name": "alvaroguzmancode\/CVE-2026-31431-mitigacion",
"owner": {
"login": "alvaroguzmancode",
"id": 17460284,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17460284?v=4",
"html_url": "https:\/\/github.com\/alvaroguzmancode",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/alvaroguzmancode\/CVE-2026-31431-mitigacion",
"description": "Explicación de la vulnerabilidad y cómo mitigarla",
"fork": false,
"created_at": "2026-05-04T15:47:14Z",
"updated_at": "2026-05-04T16:05:26Z",
"pushed_at": "2026-05-04T16:05:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229008425,
"name": "CVE-2026-31431",
"full_name": "AdityaBhatt3010\/CVE-2026-31431",
"owner": {
"login": "AdityaBhatt3010",
"id": 96762636,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96762636?v=4",
"html_url": "https:\/\/github.com\/AdityaBhatt3010",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AdityaBhatt3010\/CVE-2026-31431",
"description": "Linux Privilege Escalation | AF_ALG Crypto Abuse → Exploiting AEAD socket handling (CVE-2026-31431) to gain root via kernel-level manipulation",
"fork": false,
"created_at": "2026-05-04T15:52:47Z",
"updated_at": "2026-05-08T07:17:11Z",
"pushed_at": "2026-05-06T07:36:25Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229084743,
"name": "CVE_kernellinux_jsh",
"full_name": "jshDevs\/CVE_kernellinux_jsh",
"owner": {
"login": "jshDevs",
"id": 109306974,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109306974?v=4",
"html_url": "https:\/\/github.com\/jshDevs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jshDevs\/CVE_kernellinux_jsh",
"description": "Framework modular Bash para auditar CVE-2026-31431 (CopyFail) y CVEs relacionados del kernel Linux en distros RPM-based (AlmaLinux, Rocky, CentOS Stream 8\/9\/10)",
"fork": false,
"created_at": "2026-05-04T17:25:17Z",
"updated_at": "2026-05-04T17:28:38Z",
"pushed_at": "2026-05-04T17:27:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229267211,
"name": "CVE-2026-31431",
"full_name": "KhaosFarbauti\/CVE-2026-31431",
"owner": {
"login": "KhaosFarbauti",
"id": 32091918,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32091918?v=4",
"html_url": "https:\/\/github.com\/KhaosFarbauti",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/KhaosFarbauti\/CVE-2026-31431",
"description": "PoC for CVE-2026-31431 (Copy Fail)",
"fork": false,
"created_at": "2026-05-04T21:46:56Z",
"updated_at": "2026-05-05T06:20:25Z",
"pushed_at": "2026-05-05T06:20:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229354119,
"name": "CVE-2026-31431-Copy-Fail",
"full_name": "rippsec\/CVE-2026-31431-Copy-Fail",
"owner": {
"login": "rippsec",
"id": 162821824,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/162821824?v=4",
"html_url": "https:\/\/github.com\/rippsec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/rippsec\/CVE-2026-31431-Copy-Fail",
"description": null,
"fork": false,
"created_at": "2026-05-05T00:44:07Z",
"updated_at": "2026-07-19T05:35:11Z",
"pushed_at": "2026-05-05T00:46:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229385888,
"name": "check-copyfail-cve-2026-31431",
"full_name": "Silent4Labs\/check-copyfail-cve-2026-31431",
"owner": {
"login": "Silent4Labs",
"id": 281774515,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/281774515?v=4",
"html_url": "https:\/\/github.com\/Silent4Labs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Silent4Labs\/check-copyfail-cve-2026-31431",
"description": "It’s a read-only Linux risk assessment script for CVE-2026-31431 (\"Copy Fail\").",
"fork": false,
"created_at": "2026-05-05T01:48:17Z",
"updated_at": "2026-05-05T01:52:56Z",
"pushed_at": "2026-05-05T01:52:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229416911,
"name": "Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284",
"full_name": "6abc\/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284",
"owner": {
"login": "6abc",
"id": 97246854,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97246854?v=4",
"html_url": "https:\/\/github.com\/6abc",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/6abc\/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284",
"description": null,
"fork": false,
"created_at": "2026-05-05T02:50:48Z",
"updated_at": "2026-08-24T14:12:39Z",
"pushed_at": "2026-08-13T13:20:57Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229587224,
"name": "mitigate-copy-fail.yml",
"full_name": "deadRabbit92\/mitigate-copy-fail.yml",
"owner": {
"login": "deadRabbit92",
"id": 177714667,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/177714667?v=4",
"html_url": "https:\/\/github.com\/deadRabbit92",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/deadRabbit92\/mitigate-copy-fail.yml",
"description": "Mitigates CVE-2026-31431 (Copy Fail) by unloading and blacklisting algif_aead kernel module if it is loadable and has no active references.",
"fork": false,
"created_at": "2026-05-05T07:38:04Z",
"updated_at": "2026-05-05T08:14:13Z",
"pushed_at": "2026-05-05T08:14:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229693439,
"name": "copyfail-arm64",
"full_name": "sudoytang\/copyfail-arm64",
"owner": {
"login": "sudoytang",
"id": 182588048,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182588048?v=4",
"html_url": "https:\/\/github.com\/sudoytang",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sudoytang\/copyfail-arm64",
"description": "Analysis and ARM64 reproduction of Copy Fail (CVE-2026-31431)",
"fork": false,
"created_at": "2026-05-05T09:45:46Z",
"updated_at": "2026-09-17T18:38:40Z",
"pushed_at": "2026-09-17T18:38:35Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229714397,
"name": "Copy-Fail---CVE-2026-31431",
"full_name": "MrMixies\/Copy-Fail---CVE-2026-31431",
"owner": {
"login": "MrMixies",
"id": 15237223,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15237223?v=4",
"html_url": "https:\/\/github.com\/MrMixies",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MrMixies\/Copy-Fail---CVE-2026-31431",
"description": "Script Python pour verifier si un systeme Linux est vulnerable a la faille CVE-2026-31431 (Copy Fail), une elevation de privileges locale dans le noyau Linux.",
"fork": false,
"created_at": "2026-05-05T10:09:36Z",
"updated_at": "2026-05-05T12:14:17Z",
"pushed_at": "2026-05-05T10:18:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229777395,
"name": "CVE-2026-31431-CopyFail-static-ELF--POC",
"full_name": "Rat5ak\/CVE-2026-31431-CopyFail-static-ELF--POC",
"owner": {
"login": "Rat5ak",
"id": 93318888,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93318888?v=4",
"html_url": "https:\/\/github.com\/Rat5ak",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Rat5ak\/CVE-2026-31431-CopyFail-static-ELF--POC",
"description": "587-byte x86_64 LPE for CVE-2026-31431",
"fork": false,
"created_at": "2026-05-05T11:26:41Z",
"updated_at": "2026-05-05T22:45:03Z",
"pushed_at": "2026-05-05T22:44:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229884451,
"name": "CVE-2026-31431-Detect",
"full_name": "norvethil\/CVE-2026-31431-Detect",
"owner": {
"login": "norvethil",
"id": 73302674,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73302674?v=4",
"html_url": "https:\/\/github.com\/norvethil",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/norvethil\/CVE-2026-31431-Detect",
"description": "Detection and remediation scripts for CVE-2026-31431 — a local privilege escalation vulnerability in the Linux kernel AF_ALG subsystem (algif_aead module).",
"fork": false,
"created_at": "2026-05-05T13:26:11Z",
"updated_at": "2026-09-29T12:26:10Z",
"pushed_at": "2026-05-05T13:36:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229910115,
"name": "cve-2026-31431",
"full_name": "zhanghangorg\/cve-2026-31431",
"owner": {
"login": "zhanghangorg",
"id": 16233932,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16233932?v=4",
"html_url": "https:\/\/github.com\/zhanghangorg",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/zhanghangorg\/cve-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-05T13:52:50Z",
"updated_at": "2026-05-05T13:54:59Z",
"pushed_at": "2026-05-05T13:54:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229911854,
"name": "afalg-check",
"full_name": "itsystem\/afalg-check",
"owner": {
"login": "itsystem",
"id": 1128987,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1128987?v=4",
"html_url": "https:\/\/github.com\/itsystem",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/itsystem\/afalg-check",
"description": "Утилита для Linux, которая проверяет доступность `AF_ALG`\/`algif_aead` и помогает оценить риск по `CVE-2026-31431`.",
"fork": false,
"created_at": "2026-05-05T13:54:41Z",
"updated_at": "2026-05-08T08:26:20Z",
"pushed_at": "2026-05-08T08:28:45Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230051555,
"name": "CVE-2026-31431-detection-defense",
"full_name": "Detect-DefenseLab\/CVE-2026-31431-detection-defense",
"owner": {
"login": "Detect-DefenseLab",
"id": 252365232,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/252365232?v=4",
"html_url": "https:\/\/github.com\/Detect-DefenseLab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Detect-DefenseLab\/CVE-2026-31431-detection-defense",
"description": "CVE-2026-31431: Detection & Defense Against io_uring Bypass of Existing Detection",
"fork": false,
"created_at": "2026-05-05T16:20:45Z",
"updated_at": "2026-05-05T16:23:28Z",
"pushed_at": "2026-05-05T16:23:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230060787,
"name": "CVE-2026-31431-copy-fail",
"full_name": "ozergoker\/CVE-2026-31431-copy-fail",
"owner": {
"login": "ozergoker",
"id": 86879266,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86879266?v=4",
"html_url": "https:\/\/github.com\/ozergoker",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ozergoker\/CVE-2026-31431-copy-fail",
"description": "32-byte Python script roots every Linux distribution",
"fork": false,
"created_at": "2026-05-05T16:31:16Z",
"updated_at": "2026-05-05T16:42:06Z",
"pushed_at": "2026-05-05T16:42:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230118294,
"name": "CopyFail-Scanner-CVE-2026-31431",
"full_name": "Raptoratack\/CopyFail-Scanner-CVE-2026-31431",
"owner": {
"login": "Raptoratack",
"id": 110591178,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110591178?v=4",
"html_url": "https:\/\/github.com\/Raptoratack",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Raptoratack\/CopyFail-Scanner-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-05T17:38:43Z",
"updated_at": "2026-05-05T19:16:11Z",
"pushed_at": "2026-05-05T19:16:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230157973,
"name": "ubuntu-cve-2026-31431-mitigation",
"full_name": "mrmtwoj\/ubuntu-cve-2026-31431-mitigation",
"owner": {
"login": "mrmtwoj",
"id": 22832463,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22832463?v=4",
"html_url": "https:\/\/github.com\/mrmtwoj",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mrmtwoj\/ubuntu-cve-2026-31431-mitigation",
"description": "دستورالعمل‌های کاهش ریسک و به‌روزرسانی برای CVE-2026-31431 در سیستم‌های اوبونتو، شامل مراحل ارتقاء کرنل و kmod.",
"fork": false,
"created_at": "2026-05-05T18:26:46Z",
"updated_at": "2026-05-05T18:50:49Z",
"pushed_at": "2026-05-05T18:50:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-31431",
"infra",
"kernel",
"kmod",
"linux",
"mirror",
"mirror-iran",
"offline-mirror",
"security",
"sysadmin",
"ubuntu",
"update"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230211529,
"name": "GhostShell",
"full_name": "RazvanDuda\/GhostShell",
"owner": {
"login": "RazvanDuda",
"id": 7475595,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7475595?v=4",
"html_url": "https:\/\/github.com\/RazvanDuda",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RazvanDuda\/GhostShell",
"description": "CVE-2026-31431 — Local Privilege Escalation via Linux Kernel Page Cache Corruption",
"fork": false,
"created_at": "2026-05-05T19:33:48Z",
"updated_at": "2026-05-06T10:11:30Z",
"pushed_at": "2026-05-06T10:11:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230423569,
"name": "cve-2026-31431-copyfail",
"full_name": "darioomatos\/cve-2026-31431-copyfail",
"owner": {
"login": "darioomatos",
"id": 29695946,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29695946?v=4",
"html_url": "https:\/\/github.com\/darioomatos",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/darioomatos\/cve-2026-31431-copyfail",
"description": "CVE-2026-31431 Copy Fail - LPE no kernel Linux",
"fork": false,
"created_at": "2026-05-06T01:37:25Z",
"updated_at": "2026-06-23T03:37:50Z",
"pushed_at": "2026-05-06T01:51:49Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"af-alg",
"copy-fail",
"cve-2026-31431",
"educational",
"kernel-exploit",
"linux-kernel",
"lpe",
"page-cache",
"privilege-escalation",
"security-research"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230430873,
"name": "page_inject",
"full_name": "sgkdev\/page_inject",
"owner": {
"login": "sgkdev",
"id": 42553321,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42553321?v=4",
"html_url": "https:\/\/github.com\/sgkdev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sgkdev\/page_inject",
"description": "CVE-2026-31431-killed page-cache exploit — code exec into containers sharing the same image layer",
"fork": false,
"created_at": "2026-05-06T01:51:02Z",
"updated_at": "2026-10-13T19:10:30Z",
"pushed_at": "2026-05-06T19:32:18Z",
"stargazers_count": 77,
"watchers_count": 77,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 77,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230498007,
"name": "copy-fail-CVE-2026-31431-pythonlower3.10",
"full_name": "OneDemobird\/copy-fail-CVE-2026-31431-pythonlower3.10",
"owner": {
"login": "OneDemobird",
"id": 130287632,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130287632?v=4",
"html_url": "https:\/\/github.com\/OneDemobird",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/OneDemobird\/copy-fail-CVE-2026-31431-pythonlower3.10",
"description": "python3.10以下没有os.splice，搞了一个3.10以下版本也可以用的",
"fork": false,
"created_at": "2026-05-06T03:51:41Z",
"updated_at": "2026-05-06T03:59:07Z",
"pushed_at": "2026-05-06T03:55:49Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230530879,
"name": "CVE-2026-31431-Copy-Fail",
"full_name": "reubensammut\/CVE-2026-31431-Copy-Fail",
"owner": {
"login": "reubensammut",
"id": 760324,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/760324?v=4",
"html_url": "https:\/\/github.com\/reubensammut",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/reubensammut\/CVE-2026-31431-Copy-Fail",
"description": "My C rewrite of the Copy Fail exploit",
"fork": false,
"created_at": "2026-05-06T04:52:17Z",
"updated_at": "2026-05-06T05:10:45Z",
"pushed_at": "2026-05-06T04:55:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230636616,
"name": "CVE-2026-31431-Checker-Mitigator",
"full_name": "zenzue\/CVE-2026-31431-Checker-Mitigator",
"owner": {
"login": "zenzue",
"id": 19271340,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19271340?v=4",
"html_url": "https:\/\/github.com\/zenzue",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/zenzue\/CVE-2026-31431-Checker-Mitigator",
"description": null,
"fork": false,
"created_at": "2026-05-06T07:18:04Z",
"updated_at": "2026-07-16T09:40:21Z",
"pushed_at": "2026-05-06T09:40:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230645940,
"name": "copy-fail",
"full_name": "voxcia-io\/copy-fail",
"owner": {
"login": "voxcia-io",
"id": 270113384,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/270113384?v=4",
"html_url": "https:\/\/github.com\/voxcia-io",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/voxcia-io\/copy-fail",
"description": "Tutorial Completo: Como Proteger seu contra a Vulnerabilidade CopyFail (CVE-2026-31431)",
"fork": false,
"created_at": "2026-05-06T07:29:04Z",
"updated_at": "2026-05-06T07:34:58Z",
"pushed_at": "2026-05-06T07:34:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230675521,
"name": "copyfail-c",
"full_name": "luoqianlin\/copyfail-c",
"owner": {
"login": "luoqianlin",
"id": 7350800,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7350800?v=4",
"html_url": "https:\/\/github.com\/luoqianlin",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/luoqianlin\/copyfail-c",
"description": "C implementation for researching Copy Fail (CVE-2026-31431)",
"fork": false,
"created_at": "2026-05-06T08:05:13Z",
"updated_at": "2026-05-09T00:22:37Z",
"pushed_at": "2026-05-09T00:22:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230682952,
"name": "CVE-2026-31431-Check",
"full_name": "tangjie1\/CVE-2026-31431-Check",
"owner": {
"login": "tangjie1",
"id": 40255379,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40255379?v=4",
"html_url": "https:\/\/github.com\/tangjie1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tangjie1\/CVE-2026-31431-Check",
"description": "CVE-2026-31431 Copy Fail Linux kernel vulnerability detection script",
"fork": false,
"created_at": "2026-05-06T08:14:04Z",
"updated_at": "2026-05-06T08:15:14Z",
"pushed_at": "2026-05-06T08:15:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230754185,
"name": "CVE-2026-31431",
"full_name": "0xN7y\/CVE-2026-31431",
"owner": {
"login": "0xN7y",
"id": 70061541,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70061541?v=4",
"html_url": "https:\/\/github.com\/0xN7y",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xN7y\/CVE-2026-31431",
"description": " Logic bug in the kernel's authencesn cryptographic template that escalate privilege",
"fork": false,
"created_at": "2026-05-06T09:36:39Z",
"updated_at": "2026-10-20T07:38:30Z",
"pushed_at": "2026-05-06T09:42:49Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230877837,
"name": "CVE-2026-31431-Copy-Fail---Advanced-LPE-Proof-of-Concept---C-Rewrite",
"full_name": "iblamenear\/CVE-2026-31431-Copy-Fail---Advanced-LPE-Proof-of-Concept---C-Rewrite",
"owner": {
"login": "iblamenear",
"id": 169583375,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/169583375?v=4",
"html_url": "https:\/\/github.com\/iblamenear",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/iblamenear\/CVE-2026-31431-Copy-Fail---Advanced-LPE-Proof-of-Concept---C-Rewrite",
"description": "Copy Fail (CVE-2026-31431) is a logic bug in the Linux kernel's authencesn cryptographic template. It lets an unprivileged local user trigger a deterministic, controlled 4-byte write into the page cache of any readable file on the system.",
"fork": false,
"created_at": "2026-05-06T12:08:45Z",
"updated_at": "2026-05-06T12:13:57Z",
"pushed_at": "2026-05-06T12:13:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230883253,
"name": "XCP_ng_CVE-2026-31431_tester",
"full_name": "grabesec\/XCP_ng_CVE-2026-31431_tester",
"owner": {
"login": "grabesec",
"id": 282242801,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/282242801?v=4",
"html_url": "https:\/\/github.com\/grabesec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/grabesec\/XCP_ng_CVE-2026-31431_tester",
"description": "Test XCP_ng 8.3 for CVE-2026-31431Vulnerability",
"fork": false,
"created_at": "2026-05-06T12:15:18Z",
"updated_at": "2026-05-06T12:36:46Z",
"pushed_at": "2026-05-06T12:36:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231023679,
"name": "cve-2026-31431-ftrace",
"full_name": "philfry\/cve-2026-31431-ftrace",
"owner": {
"login": "philfry",
"id": 1649785,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1649785?v=4",
"html_url": "https:\/\/github.com\/philfry",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/philfry\/cve-2026-31431-ftrace",
"description": "mitigation of cve-2026-31431 using ftrace",
"fork": false,
"created_at": "2026-05-06T14:50:12Z",
"updated_at": "2026-07-13T12:12:45Z",
"pushed_at": "2026-05-12T07:19:26Z",
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 12,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231051096,
"name": "CVE-2026-31431-Copy-Fail-Container-Escape",
"full_name": "hans362\/CVE-2026-31431-Copy-Fail-Container-Escape",
"owner": {
"login": "hans362",
"id": 32535810,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32535810?v=4",
"html_url": "https:\/\/github.com\/hans362",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hans362\/CVE-2026-31431-Copy-Fail-Container-Escape",
"description": "Container escape on any docker container with healthcheck enabled via CVE-2026-31431",
"fork": false,
"created_at": "2026-05-06T15:19:59Z",
"updated_at": "2026-10-26T16:33:01Z",
"pushed_at": "2026-05-07T01:42:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231072697,
"name": "CVE-2026-31431",
"full_name": "StarxSky\/CVE-2026-31431",
"owner": {
"login": "StarxSky",
"id": 62407841,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62407841?v=4",
"html_url": "https:\/\/github.com\/StarxSky",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/StarxSky\/CVE-2026-31431",
"description": "\"Copy Fail\" ",
"fork": false,
"created_at": "2026-05-06T15:44:26Z",
"updated_at": "2026-05-06T16:57:43Z",
"pushed_at": "2026-05-06T16:57:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231287640,
"name": "Estudo-de-Caso-CVE-2026-31431-CopyFail",
"full_name": "pedro-lucas-melo\/Estudo-de-Caso-CVE-2026-31431-CopyFail",
"owner": {
"login": "pedro-lucas-melo",
"id": 256322179,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/256322179?v=4",
"html_url": "https:\/\/github.com\/pedro-lucas-melo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pedro-lucas-melo\/Estudo-de-Caso-CVE-2026-31431-CopyFail",
"description": "🔐 Estudo de caso completo do CVE-2026-31431 (CopyFail) — vulnerabilidade crítica de escalada de privilégio no kernel Linux. Inclui análise técnica, scripts de verificação, hardening e playbook de resposta a incidentes. Fins educacionais.",
"fork": false,
"created_at": "2026-05-06T20:21:32Z",
"updated_at": "2026-06-17T18:56:41Z",
"pushed_at": "2026-05-07T00:08:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"hardening",
"kernel",
"linux",
"privilege-escalation",
"python",
"security",
"shell"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231506841,
"name": "CVE-2026-31431-live-code-corruption",
"full_name": "ikow\/CVE-2026-31431-live-code-corruption",
"owner": {
"login": "ikow",
"id": 5469411,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5469411?v=4",
"html_url": "https:\/\/github.com\/ikow",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ikow\/CVE-2026-31431-live-code-corruption",
"description": "CVE-2026-31431 (Copy Fail) novel exploit: live code corruption via page cache. Overwrites libc exit() code through MAP_PRIVATE page sharing — affects ALL running processes.",
"fork": false,
"created_at": "2026-05-07T02:58:48Z",
"updated_at": "2026-05-08T03:39:30Z",
"pushed_at": "2026-05-08T03:39:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231522737,
"name": "cve-2026-31431-copy-fail",
"full_name": "gagaltotal\/cve-2026-31431-copy-fail",
"owner": {
"login": "gagaltotal",
"id": 23299078,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23299078?v=4",
"html_url": "https:\/\/github.com\/gagaltotal",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/gagaltotal\/cve-2026-31431-copy-fail",
"description": "CVE-2026-31431 Copy Fail",
"fork": false,
"created_at": "2026-05-07T03:25:42Z",
"updated_at": "2026-08-10T14:32:15Z",
"pushed_at": "2026-05-07T17:48:59Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"archlinux",
"cve",
"cve-scanning",
"debian",
"debian-linux",
"fedora-linux",
"linux",
"linux-kernel",
"network",
"networking",
"opensuse",
"python",
"python3",
"server",
"subnetting",
"ubuntu"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231576345,
"name": "Copy-fail-CVE-2026-31431-Exploit-in-C",
"full_name": "Mr-bv\/Copy-fail-CVE-2026-31431-Exploit-in-C",
"owner": {
"login": "Mr-bv",
"id": 29275255,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29275255?v=4",
"html_url": "https:\/\/github.com\/Mr-bv",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Mr-bv\/Copy-fail-CVE-2026-31431-Exploit-in-C",
"description": "Discovery and original disclosure of CVE-2026-31431: Theori \/ Xint. Public writeup: https:\/\/copy.fail\/.",
"fork": false,
"created_at": "2026-05-07T04:59:57Z",
"updated_at": "2026-05-08T07:57:24Z",
"pushed_at": "2026-05-08T07:57:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231662576,
"name": "CVE-2026-31431-Copy-Fail-add-arm64",
"full_name": "0xer0\/CVE-2026-31431-Copy-Fail-add-arm64",
"owner": {
"login": "0xer0",
"id": 75836557,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75836557?v=4",
"html_url": "https:\/\/github.com\/0xer0",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xer0\/CVE-2026-31431-Copy-Fail-add-arm64",
"description": "CVE-2026-31431 漏洞利用python脚本，支持arm64,x86架构",
"fork": false,
"created_at": "2026-05-07T07:04:30Z",
"updated_at": "2026-09-09T14:06:04Z",
"pushed_at": "2026-05-07T07:11:51Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231737932,
"name": "CVE-2026-31431",
"full_name": "361way\/CVE-2026-31431",
"owner": {
"login": "361way",
"id": 7507290,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7507290?v=4",
"html_url": "https:\/\/github.com\/361way",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/361way\/CVE-2026-31431",
"description": "CVE-2026-31431检测和测试",
"fork": false,
"created_at": "2026-05-07T08:35:34Z",
"updated_at": "2026-05-07T08:40:58Z",
"pushed_at": "2026-05-07T08:40:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231866890,
"name": "linux-copy-fail-CVE-2026-31431",
"full_name": "adilkurtulmus\/linux-copy-fail-CVE-2026-31431",
"owner": {
"login": "adilkurtulmus",
"id": 18593813,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18593813?v=4",
"html_url": "https:\/\/github.com\/adilkurtulmus",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/adilkurtulmus\/linux-copy-fail-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-07T11:12:07Z",
"updated_at": "2026-05-11T10:51:16Z",
"pushed_at": "2026-05-11T10:51:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231906888,
"name": "deny-af-alg-bpf",
"full_name": "Vatson112\/deny-af-alg-bpf",
"owner": {
"login": "Vatson112",
"id": 55401893,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55401893?v=4",
"html_url": "https:\/\/github.com\/Vatson112",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Vatson112\/deny-af-alg-bpf",
"description": "BPF prog to fix CVE-2026-31431",
"fork": false,
"created_at": "2026-05-07T11:59:53Z",
"updated_at": "2026-05-07T12:37:12Z",
"pushed_at": "2026-05-07T12:36:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231911578,
"name": "copyfail",
"full_name": "kwilck\/copyfail",
"owner": {
"login": "kwilck",
"id": 90837346,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90837346?v=4",
"html_url": "https:\/\/github.com\/kwilck",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kwilck\/copyfail",
"description": "Copy Fail (CVE-2026-31431) is a logic flaw in the Linux kernel's algif_aead module — part of the AF_ALG userspace crypto API. It was disclosed on April 29, 2026 by Theori \/ Xint Code.",
"fork": false,
"created_at": "2026-05-07T12:05:20Z",
"updated_at": "2026-06-15T06:06:02Z",
"pushed_at": "2026-05-07T12:10:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-31431",
"cve-scanning",
"cybersecurity",
"cybersecurity-tools",
"linux",
"linux-kernel",
"privilege-escalation"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231938544,
"name": "cve-2026-31431",
"full_name": "pvpaulo01\/cve-2026-31431",
"owner": {
"login": "pvpaulo01",
"id": 101027820,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/101027820?v=4",
"html_url": "https:\/\/github.com\/pvpaulo01",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pvpaulo01\/cve-2026-31431",
"description": "Esse documento descreve o Exploit publico em python",
"fork": false,
"created_at": "2026-05-07T12:36:41Z",
"updated_at": "2026-05-07T12:38:41Z",
"pushed_at": "2026-05-07T12:38:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1232082114,
"name": "copy-fail-mitigation-with-bpftrace",
"full_name": "tang-yikai\/copy-fail-mitigation-with-bpftrace",
"owner": {
"login": "tang-yikai",
"id": 161001265,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/161001265?v=4",
"html_url": "https:\/\/github.com\/tang-yikai",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tang-yikai\/copy-fail-mitigation-with-bpftrace",
"description": "CVE-2026-31431, AKA Copy Fail, can be mitigated in one-line with bpftrace",
"fork": false,
"created_at": "2026-05-07T15:12:42Z",
"updated_at": "2026-05-07T16:49:54Z",
"pushed_at": "2026-05-07T16:49:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1232151422,
"name": "CVE-2026-31431-Analysis-and-Fix",
"full_name": "abdelkabirouadoukou\/CVE-2026-31431-Analysis-and-Fix",
"owner": {
"login": "abdelkabirouadoukou",
"id": 152230716,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152230716?v=4",
"html_url": "https:\/\/github.com\/abdelkabirouadoukou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/abdelkabirouadoukou\/CVE-2026-31431-Analysis-and-Fix",
"description": "Technical deep dive, root cause analysis, and LKML patch workflow for CVE-2026-31431 (Linux kernel local privilege escalation in algif_aead).",
"fork": false,
"created_at": "2026-05-07T16:31:58Z",
"updated_at": "2026-10-17T01:17:33Z",
"pushed_at": "2026-10-17T01:17:13Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"crypto-api-pci",
"cve-2026-31431",
"kernel-exploitation",
"linux-kernel",
"privilege-escalation",
"security-research",
"vulnerability-analysis"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1232283257,
"name": "CVE-2026-31431-python-copyfail-POC",
"full_name": "julichaan\/CVE-2026-31431-python-copyfail-POC",
"owner": {
"login": "julichaan",
"id": 179177178,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179177178?v=4",
"html_url": "https:\/\/github.com\/julichaan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/julichaan\/CVE-2026-31431-python-copyfail-POC",
"description": null,
"fork": false,
"created_at": "2026-05-07T19:21:15Z",
"updated_at": "2026-05-07T20:10:21Z",
"pushed_at": "2026-05-07T20:10:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1232391663,
"name": "CVE-2026-31431",
"full_name": "guiimoraes\/CVE-2026-31431",
"owner": {
"login": "guiimoraes",
"id": 251377213,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/251377213?v=4",
"html_url": "https:\/\/github.com\/guiimoraes",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/guiimoraes\/CVE-2026-31431",
"description": "One-liner Python LPE for CVE-2026-31431 (CopyFail2). No compilation, no dependencies beyond Python+OpenSSL. Just curl | python3 and get root on Linux 6.5+.",
"fork": false,
"created_at": "2026-05-07T22:14:36Z",
"updated_at": "2026-06-06T00:18:41Z",
"pushed_at": "2026-05-08T00:01:22Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1232670247,
"name": "copy-fail-CVE-2026-31431",
"full_name": "Morton-Li\/copy-fail-CVE-2026-31431",
"owner": {
"login": "Morton-Li",
"id": 43003451,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43003451?v=4",
"html_url": "https:\/\/github.com\/Morton-Li",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Morton-Li\/copy-fail-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-08T06:41:35Z",
"updated_at": "2026-05-10T10:18:35Z",
"pushed_at": "2026-05-10T10:18:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1232748094,
"name": "c-copy-fail",
"full_name": "OpenPixelSystems\/c-copy-fail",
"owner": {
"login": "OpenPixelSystems",
"id": 38703477,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38703477?v=4",
"html_url": "https:\/\/github.com\/OpenPixelSystems",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/OpenPixelSystems\/c-copy-fail",
"description": "CVE-2026-31431 in C for aarch64 and amd64",
"fork": false,
"created_at": "2026-05-08T08:24:22Z",
"updated_at": "2026-05-28T09:04:57Z",
"pushed_at": "2026-05-08T09:52:03Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": true,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1232772151,
"name": "Copy-Fail",
"full_name": "p401a-ops\/Copy-Fail",
"owner": {
"login": "p401a-ops",
"id": 261409834,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/261409834?v=4",
"html_url": "https:\/\/github.com\/p401a-ops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/p401a-ops\/Copy-Fail",
"description": "CVE-2026-31431 (\"Copy Fail\") vulnerability detector & exploit on Astra linux 1.7.6 with 3.7+ python",
"fork": false,
"created_at": "2026-05-08T08:55:08Z",
"updated_at": "2026-05-12T08:37:52Z",
"pushed_at": "2026-05-12T08:37:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"astra-linux",
"copy-fail"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1232934547,
"name": "ansible-mitigate-copyfail-dirtyfrag",
"full_name": "infiniroot\/ansible-mitigate-copyfail-dirtyfrag",
"owner": {
"login": "infiniroot",
"id": 29702565,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29702565?v=4",
"html_url": "https:\/\/github.com\/infiniroot",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/infiniroot\/ansible-mitigate-copyfail-dirtyfrag",
"description": "Simple Ansible Playbook to mitigate against CopyFail (CVE-2026-31431) and DirtyFrag (CVE-2026-43284) vulnerabilities.",
"fork": false,
"created_at": "2026-05-08T12:26:13Z",
"updated_at": "2026-05-14T11:46:41Z",
"pushed_at": "2026-05-14T11:46:15Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"ansible",
"copyfail",
"cve-2026-31431",
"cve-2026-43284",
"cve-2026-46300",
"dirtyfrag",
"fragnesia",
"linux-kernel",
"mitigation",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1233022468,
"name": "DIRTYFAIL",
"full_name": "KaraZajac\/DIRTYFAIL",
"owner": {
"login": "KaraZajac",
"id": 261682056,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/261682056?v=4",
"html_url": "https:\/\/github.com\/KaraZajac",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/KaraZajac\/DIRTYFAIL",
"description": "Detector + PoC for Linux page-cache write vulnerabilities: Copy Fail (CVE-2026-31431) and Dirty Frag (CVE-2026-43284\/43500). Authorized security research only.",
"fork": false,
"created_at": "2026-05-08T14:05:37Z",
"updated_at": "2026-11-03T00:50:18Z",
"pushed_at": "2026-05-17T14:38:43Z",
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 30,
"score": 0,
"subscribers_count": 0
},
{
"id": 1233060632,
"name": "MitigationToolkit-ROSN-LR5-Full",
"full_name": "ROSNLR5\/MitigationToolkit-ROSN-LR5-Full",
"owner": {
"login": "ROSNLR5",
"id": 281082471,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/281082471?v=4",
"html_url": "https:\/\/github.com\/ROSNLR5",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ROSNLR5\/MitigationToolkit-ROSN-LR5-Full",
"description": "Kernel LPE PoC & Mitigation Toolkit - ROSN-LR5-Full (CVE-2026-31431)",
"fork": false,
"created_at": "2026-05-08T14:50:17Z",
"updated_at": "2026-05-08T15:03:07Z",
"pushed_at": "2026-05-08T15:02:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1233130669,
"name": "CVE-2026-31431-Verificador-Exploit",
"full_name": "hori0729\/CVE-2026-31431-Verificador-Exploit",
"owner": {
"login": "hori0729",
"id": 135556806,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/135556806?v=4",
"html_url": "https:\/\/github.com\/hori0729",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hori0729\/CVE-2026-31431-Verificador-Exploit",
"description": "Linux Kernel Local Privilege Escalation",
"fork": false,
"created_at": "2026-05-08T16:14:49Z",
"updated_at": "2026-05-08T16:31:26Z",
"pushed_at": "2026-05-08T16:31:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1233207148,
"name": "vcheck",
"full_name": "krisiasty\/vcheck",
"owner": {
"login": "krisiasty",
"id": 6045259,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6045259?v=4",
"html_url": "https:\/\/github.com\/krisiasty",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/krisiasty\/vcheck",
"description": "Vulnerability detection and mitigation tool for Copy Fail and Dirty Frag bugs (CVE-2026-31431, CVE-2026-43284, CVE-2026-43500)",
"fork": false,
"created_at": "2026-05-08T17:54:04Z",
"updated_at": "2026-10-21T20:17:24Z",
"pushed_at": "2026-11-02T08:26:23Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"audit",
"cve",
"fix",
"kernel-modules",
"linux",
"mitigation",
"security",
"security-audit",
"security-tools",
"ssh",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
{
"id": 1233538105,
"name": "copy_fail_mitigation",
"full_name": "vorkampfer\/copy_fail_mitigation",
"owner": {
"login": "vorkampfer",
"id": 71790592,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71790592?v=4",
"html_url": "https:\/\/github.com\/vorkampfer",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/vorkampfer\/copy_fail_mitigation",
"description": "This script will attempt to mitigate the copy_fail attack. CVE-2026-31431",
"fork": false,
"created_at": "2026-05-09T04:20:08Z",
"updated_at": "2026-05-09T04:40:24Z",
"pushed_at": "2026-05-09T04:40:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1233730308,
"name": "CVE-2026-31431_exp.c",
"full_name": "Helios973\/CVE-2026-31431_exp.c",
"owner": {
"login": "Helios973",
"id": 104307147,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104307147?v=4",
"html_url": "https:\/\/github.com\/Helios973",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Helios973\/CVE-2026-31431_exp.c",
"description": null,
"fork": false,
"created_at": "2026-05-09T09:35:17Z",
"updated_at": "2026-05-18T12:50:15Z",
"pushed_at": "2026-05-18T12:49:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1233944093,
"name": "CVE-2026-31431-check",
"full_name": "haydenjames\/CVE-2026-31431-check",
"owner": {
"login": "haydenjames",
"id": 6467408,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6467408?v=4",
"html_url": "https:\/\/github.com\/haydenjames",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/haydenjames\/CVE-2026-31431-check",
"description": "Read-only checker for CVE-2026-31431 (algif_aead local root). Reports kernel\/module state and suggests mitigations.",
"fork": false,
"created_at": "2026-05-09T14:47:57Z",
"updated_at": "2026-10-20T16:54:01Z",
"pushed_at": "2026-05-12T15:20:29Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
{
"id": 1234242356,
"name": "Copy_Grail",
"full_name": "cleozi\/Copy_Grail",
"owner": {
"login": "cleozi",
"id": 250872734,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/250872734?v=4",
"html_url": "https:\/\/github.com\/cleozi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cleozi\/Copy_Grail",
"description": "Elegant C++ exploit for CVE-2026-31431 (Copy Fail) using AF_ALG authenticated encryption + splice(2) to overwrite setuid binary memory",
"fork": false,
"created_at": "2026-05-09T23:36:35Z",
"updated_at": "2026-05-10T12:38:29Z",
"pushed_at": "2026-05-10T12:38:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1234358906,
"name": "copyfail2_electric_boogaloo_fix",
"full_name": "vorkampfer\/copyfail2_electric_boogaloo_fix",
"owner": {
"login": "vorkampfer",
"id": 71790592,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71790592?v=4",
"html_url": "https:\/\/github.com\/vorkampfer",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/vorkampfer\/copyfail2_electric_boogaloo_fix",
"description": "A temporary mitigation against copy_fail variant (copyfail2_electric_boogaloo) - Unprivileged Linux LPE via xfrm ESP-in-UDP MSG_SPLICE_PAGES no-COW fast path. Page-cache write into any readable file. Overwrites a nologin line in \/etc\/passwd with sick::0:0:…:\/:\/bin\/bash and sus into it. Same class as Copy Fail (CVE-2026-31431), different subsystem.",
"fork": false,
"created_at": "2026-05-10T04:38:21Z",
"updated_at": "2026-05-19T16:09:45Z",
"pushed_at": "2026-05-19T16:06:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1234921588,
"name": "CVE-2026-31431",
"full_name": "AdemZero\/CVE-2026-31431",
"owner": {
"login": "AdemZero",
"id": 211137778,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211137778?v=4",
"html_url": "https:\/\/github.com\/AdemZero",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AdemZero\/CVE-2026-31431",
"description": "Educational Proof of Concept for CVE-2026-31431 \/ Copy Fail Linux local privilege escalation via AF_ALG algif_aead",
"fork": false,
"created_at": "2026-05-10T20:12:29Z",
"updated_at": "2026-08-16T22:09:33Z",
"pushed_at": "2026-05-10T20:23:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-31431",
"cve-2026-31431-copy-fail-privilege-escalation-lpe",
"cve-2026-31431-lpe-exploit",
"cve-2026-31431-poc",
"poc"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1235059624,
"name": "CVE-2026-31431",
"full_name": "Lutfifakee-Project\/CVE-2026-31431",
"owner": {
"login": "Lutfifakee-Project",
"id": 244214024,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/244214024?v=4",
"html_url": "https:\/\/github.com\/Lutfifakee-Project",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Lutfifakee-Project\/CVE-2026-31431",
"description": "CVE-2026-31431 - Linux Kernel Page Cache Vulnerability",
"fork": false,
"created_at": "2026-05-11T01:14:12Z",
"updated_at": "2026-10-24T20:19:01Z",
"pushed_at": "2026-09-27T22:10:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-31431",
"cve-2026-31431-lpe-exploit",
"cve-2026-31431-poc",
"linux-kernel",
"security-research"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1235439128,
"name": "CVE-2026-31431-CopyFail-Lab",
"full_name": "u1tr0nex\/CVE-2026-31431-CopyFail-Lab",
"owner": {
"login": "u1tr0nex",
"id": 37265416,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37265416?v=4",
"html_url": "https:\/\/github.com\/u1tr0nex",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/u1tr0nex\/CVE-2026-31431-CopyFail-Lab",
"description": "Lab testing documentation for CVE-2026-31431 (Copy Fail) Linux kernel LPE",
"fork": false,
"created_at": "2026-05-11T10:23:45Z",
"updated_at": "2026-05-18T11:30:16Z",
"pushed_at": "2026-05-11T10:48:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1235604978,
"name": "CVE-2026-31431-Analysis",
"full_name": "mauricioportela\/CVE-2026-31431-Analysis",
"owner": {
"login": "mauricioportela",
"id": 251644960,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/251644960?v=4",
"html_url": "https:\/\/github.com\/mauricioportela",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mauricioportela\/CVE-2026-31431-Analysis",
"description": "Relatório de Análise Técnica: Exploração de Falha de Isolamento no Kernel Linux (CVE-2026-31431)",
"fork": false,
"created_at": "2026-05-11T13:35:49Z",
"updated_at": "2026-06-10T18:31:55Z",
"pushed_at": "2026-06-10T18:31:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1235845955,
"name": "CopyFile_CVE-2026-31431",
"full_name": "dgrobinson0\/CopyFile_CVE-2026-31431",
"owner": {
"login": "dgrobinson0",
"id": 157972974,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/157972974?v=4",
"html_url": "https:\/\/github.com\/dgrobinson0",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dgrobinson0\/CopyFile_CVE-2026-31431",
"description": "Exploit for CVE-2026-31431 (Copy Fail)",
"fork": false,
"created_at": "2026-05-11T17:58:20Z",
"updated_at": "2026-05-11T18:43:04Z",
"pushed_at": "2026-05-11T18:43:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1235913979,
"name": "copyfail",
"full_name": "polyakovavv\/copyfail",
"owner": {
"login": "polyakovavv",
"id": 126664525,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/126664525?v=4",
"html_url": "https:\/\/github.com\/polyakovavv",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/polyakovavv\/copyfail",
"description": "Copy Fail (CVE-2026-31431)",
"fork": false,
"created_at": "2026-05-11T19:23:03Z",
"updated_at": "2026-05-11T19:28:16Z",
"pushed_at": "2026-05-11T19:28:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1236371334,
"name": "CVE-2026-31431",
"full_name": "gbonacini\/CVE-2026-31431",
"owner": {
"login": "gbonacini",
"id": 5440458,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5440458?v=4",
"html_url": "https:\/\/github.com\/gbonacini",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/gbonacini\/CVE-2026-31431",
"description": "A CVE-2026-31431 implementation in c++ and inline assembly dependency free",
"fork": false,
"created_at": "2026-05-12T07:30:56Z",
"updated_at": "2026-09-29T20:39:12Z",
"pushed_at": "2026-05-19T19:45:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"assembly",
"cpp20",
"cve-2026-31431"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1236382288,
"name": "CVE-2026-31431",
"full_name": "studiogangster\/CVE-2026-31431",
"owner": {
"login": "studiogangster",
"id": 12793420,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12793420?v=4",
"html_url": "https:\/\/github.com\/studiogangster",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/studiogangster\/CVE-2026-31431",
"description": "oen liner CVE-2026-31431 test. Created 'sandbox' on sudo user and tests if ir can escape to root",
"fork": false,
"created_at": "2026-05-12T07:40:49Z",
"updated_at": "2026-05-17T20:15:57Z",
"pushed_at": "2026-05-12T10:40:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1236764293,
"name": "copyfail-fix",
"full_name": "paulorlima9\/copyfail-fix",
"owner": {
"login": "paulorlima9",
"id": 209261759,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/209261759?v=4",
"html_url": "https:\/\/github.com\/paulorlima9",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/paulorlima9\/copyfail-fix",
"description": "Quick mitigation and patch script for CVE-2026-31431 (Copy Fail) on Ubuntu\/Debian VPS",
"fork": false,
"created_at": "2026-05-12T14:50:38Z",
"updated_at": "2026-06-12T18:12:45Z",
"pushed_at": "2026-05-12T15:25:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1237022452,
"name": "CVE-2026-31431-copyfail-aarch64",
"full_name": "sh4den\/CVE-2026-31431-copyfail-aarch64",
"owner": {
"login": "sh4den",
"id": 69421356,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69421356?v=4",
"html_url": "https:\/\/github.com\/sh4den",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sh4den\/CVE-2026-31431-copyfail-aarch64",
"description": null,
"fork": false,
"created_at": "2026-05-12T19:56:36Z",
"updated_at": "2026-06-23T21:20:41Z",
"pushed_at": "2026-06-23T21:20:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1237230551,
"name": "SplicePrivillegeEscalationFIX",
"full_name": "DroPZsec\/SplicePrivillegeEscalationFIX",
"owner": {
"login": "DroPZsec",
"id": 94165782,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94165782?v=4",
"html_url": "https:\/\/github.com\/DroPZsec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/DroPZsec\/SplicePrivillegeEscalationFIX",
"description": "this little script blocks the new splice-ram-privlilleg ecalation fastly befor the contributers do it ( CVE-2026-31431) (CopyFail fix)",
"fork": false,
"created_at": "2026-05-13T02:01:30Z",
"updated_at": "2026-05-13T02:14:23Z",
"pushed_at": "2026-05-13T02:02:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1237654676,
"name": "Copy-Fail-CVE-2026-31431-Lab",
"full_name": "kuniyal08\/Copy-Fail-CVE-2026-31431-Lab",
"owner": {
"login": "kuniyal08",
"id": 179104695,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179104695?v=4",
"html_url": "https:\/\/github.com\/kuniyal08",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kuniyal08\/Copy-Fail-CVE-2026-31431-Lab",
"description": "Reproduced the fileless LPE CVE‑2026‑31431 (“Copy Fail”) on Kali Linux, then built auditd, Sigma & YARA detections to catch this stealthy kernel exploit that leaves no disk footprint.",
"fork": false,
"created_at": "2026-05-13T11:36:00Z",
"updated_at": "2026-07-23T12:25:59Z",
"pushed_at": "2026-07-23T12:25:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1237824325,
"name": "copy-fail-CVE-2026-31431",
"full_name": "SilverRuler\/copy-fail-CVE-2026-31431",
"owner": {
"login": "SilverRuler",
"id": 77913282,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77913282?v=4",
"html_url": "https:\/\/github.com\/SilverRuler",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SilverRuler\/copy-fail-CVE-2026-31431",
"description": "copy-fail-CVE-2026-31431",
"fork": false,
"created_at": "2026-05-13T14:43:00Z",
"updated_at": "2026-09-03T23:35:06Z",
"pushed_at": "2026-09-03T23:35:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1238225490,
"name": "cve-2026-31431",
"full_name": "Sebastian294\/cve-2026-31431",
"owner": {
"login": "Sebastian294",
"id": 89420714,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89420714?v=4",
"html_url": "https:\/\/github.com\/Sebastian294",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Sebastian294\/cve-2026-31431",
"description": "Analísis - POC - Mitigación",
"fork": false,
"created_at": "2026-05-13T23:49:20Z",
"updated_at": "2026-05-15T03:01:07Z",
"pushed_at": "2026-05-15T03:01:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-31431",
"docker",
"labs",
"linux-kernel",
"mitigation",
"poc"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1238465365,
"name": "CVE-2026-31431-CopyFail",
"full_name": "0xFuffM3\/CVE-2026-31431-CopyFail",
"owner": {
"login": "0xFuffM3",
"id": 270822722,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/270822722?v=4",
"html_url": "https:\/\/github.com\/0xFuffM3",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xFuffM3\/CVE-2026-31431-CopyFail",
"description": null,
"fork": false,
"created_at": "2026-05-14T06:32:14Z",
"updated_at": "2026-05-14T09:16:48Z",
"pushed_at": "2026-05-14T09:16:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1238971610,
"name": "CopyFail",
"full_name": "dotPY-hax\/CopyFail",
"owner": {
"login": "dotPY-hax",
"id": 67259802,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67259802?v=4",
"html_url": "https:\/\/github.com\/dotPY-hax",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dotPY-hax\/CopyFail",
"description": "A CopyFail CVE-2026-31431 implementation in python that isnt slop! Bring your own payload",
"fork": false,
"created_at": "2026-05-14T16:24:24Z",
"updated_at": "2026-05-14T16:28:31Z",
"pushed_at": "2026-05-14T16:28:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1240343224,
"name": "ProyectoFinalSO",
"full_name": "zKaaanon\/ProyectoFinalSO",
"owner": {
"login": "zKaaanon",
"id": 124122139,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124122139?v=4",
"html_url": "https:\/\/github.com\/zKaaanon",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/zKaaanon\/ProyectoFinalSO",
"description": "Estudio del bug CVE-2026-31431",
"fork": false,
"created_at": "2026-05-16T03:07:04Z",
"updated_at": "2026-05-26T23:48:36Z",
"pushed_at": "2026-05-26T23:48:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1240822761,
"name": "CVE-2026-31431-Metasploit-exploit",
"full_name": "adityasingh108\/CVE-2026-31431-Metasploit-exploit",
"owner": {
"login": "adityasingh108",
"id": 65594658,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65594658?v=4",
"html_url": "https:\/\/github.com\/adityasingh108",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/adityasingh108\/CVE-2026-31431-Metasploit-exploit",
"description": "Automated Metasploit post-exploitation module for CVE-2026-31431 (\"Copy Fail\"). Weaponizes a deterministic logic flaw in the Linux kernel AF_ALG subsystem to achieve local privilege escalation (LPE) to root by safely corrupting a setuid binary directly in the shared Page Cache (RAM) without modifying files on disk",
"fork": false,
"created_at": "2026-05-16T16:02:14Z",
"updated_at": "2026-05-18T16:51:32Z",
"pushed_at": "2026-05-17T10:55:32Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1241001297,
"name": "CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention",
"full_name": "Maxime288\/CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention",
"owner": {
"login": "Maxime288",
"id": 145361929,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145361929?v=4",
"html_url": "https:\/\/github.com\/Maxime288",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Maxime288\/CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention",
"description": null,
"fork": false,
"created_at": "2026-05-16T20:53:45Z",
"updated_at": "2026-05-18T00:08:29Z",
"pushed_at": "2026-05-18T00:08:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1241790762,
"name": "asm-copyfail",
"full_name": "Pithase\/asm-copyfail",
"owner": {
"login": "Pithase",
"id": 156387941,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156387941?v=4",
"html_url": "https:\/\/github.com\/Pithase",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Pithase\/asm-copyfail",
"description": "CVE-2026-31431 (Copy Fail) — Análisis y desarrollo en Ensamblador x86-64 | Analysis and development in x86-64 Assembly",
"fork": false,
"created_at": "2026-05-17T20:23:09Z",
"updated_at": "2026-08-19T01:42:21Z",
"pushed_at": "2026-05-17T21:06:23Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1242068559,
"name": "CVE-2026-31431-Copy-Fail",
"full_name": "4xura\/CVE-2026-31431-Copy-Fail",
"owner": {
"login": "4xura",
"id": 164868833,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164868833?v=4",
"html_url": "https:\/\/github.com\/4xura",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/4xura\/CVE-2026-31431-Copy-Fail",
"description": "Research artifacts, PoC scripts, and lab assets for the Copy Fail Linux local privilege escalation writeup on https:\/\/4xura.com\/binex\/kernel\/copy-fail",
"fork": false,
"created_at": "2026-05-18T05:23:15Z",
"updated_at": "2026-09-07T00:12:22Z",
"pushed_at": "2026-05-19T09:22:29Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
{
"id": 1242185450,
"name": "CVE-2026-31431",
"full_name": "royayub\/CVE-2026-31431",
"owner": {
"login": "royayub",
"id": 79398576,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79398576?v=4",
"html_url": "https:\/\/github.com\/royayub",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/royayub\/CVE-2026-31431",
"description": "Local Privilege Escalation. Flips the running user's UID to 0 in \/etc\/passwd's page cache, then invokes su for a root shell.",
"fork": false,
"created_at": "2026-05-18T07:44:05Z",
"updated_at": "2026-05-18T07:50:50Z",
"pushed_at": "2026-05-18T07:50:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1242816393,
"name": "cve-2026-31431-mitigation",
"full_name": "Yakovyakov\/cve-2026-31431-mitigation",
"owner": {
"login": "Yakovyakov",
"id": 171245020,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/171245020?v=4",
"html_url": "https:\/\/github.com\/Yakovyakov",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Yakovyakov\/cve-2026-31431-mitigation",
"description": " Detection and mitigation tooling for CVE-2026-31431 (Copy Fail) on Linux kernels. Includes Phalanx-CCS and Silent4Labs scripts plus an Ansible playbook to apply temporary mitigation (block algif_aead module or boot parameter) across servers.",
"fork": false,
"created_at": "2026-05-18T19:32:12Z",
"updated_at": "2026-05-19T13:29:43Z",
"pushed_at": "2026-05-19T13:25:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"ansible",
"cve-2026-31431",
"mitigation"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1242921991,
"name": "OCI-Ansible-Fix-CVE-2026-31431",
"full_name": "cj667113\/OCI-Ansible-Fix-CVE-2026-31431",
"owner": {
"login": "cj667113",
"id": 40300884,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40300884?v=4",
"html_url": "https:\/\/github.com\/cj667113",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cj667113\/OCI-Ansible-Fix-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-18T22:14:21Z",
"updated_at": "2026-05-18T22:14:29Z",
"pushed_at": "2026-05-18T22:14:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1243354056,
"name": "cve-2026-31431-checker",
"full_name": "GubiczaP\/cve-2026-31431-checker",
"owner": {
"login": "GubiczaP",
"id": 178380622,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178380622?v=4",
"html_url": "https:\/\/github.com\/GubiczaP",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/GubiczaP\/cve-2026-31431-checker",
"description": "Shell scanner for CVE-2026-31431 \"Copy Fail\" — a local privilege escalation via Linux kernel page cache corruption (algif_aead\/AF_ALG). Checks kernel version, patch status, module state, setuid exposure and mitigations. Supports Debian 11–13 and Ubuntu 20.04–25.10. CI\/CD-ready (exit codes + JSON output).",
"fork": false,
"created_at": "2026-05-19T09:07:59Z",
"updated_at": "2026-05-19T09:13:17Z",
"pushed_at": "2026-05-19T09:13:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1244226886,
"name": "ptrace_may_dream",
"full_name": "sgkdev\/ptrace_may_dream",
"owner": {
"login": "sgkdev",
"id": 42553321,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42553321?v=4",
"html_url": "https:\/\/github.com\/sgkdev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sgkdev\/ptrace_may_dream",
"description": "CVE-2026-31431-killed page-cache exploit — code exec into containers sharing the same image layer",
"fork": false,
"created_at": "2026-05-20T04:37:35Z",
"updated_at": "2026-08-14T09:19:56Z",
"pushed_at": "2026-05-20T04:52:41Z",
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 21,
"score": 0,
"subscribers_count": 0
},
{
"id": 1245407320,
"name": "CVE-2026-31431-C",
"full_name": "yangh-beep\/CVE-2026-31431-C",
"owner": {
"login": "yangh-beep",
"id": 106379679,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106379679?v=4",
"html_url": "https:\/\/github.com\/yangh-beep",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yangh-beep\/CVE-2026-31431-C",
"description": null,
"fork": false,
"created_at": "2026-05-21T07:36:55Z",
"updated_at": "2026-05-21T07:37:34Z",
"pushed_at": "2026-05-21T07:37:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1246019048,
"name": "CVE-2026-31431-Copy-Fail---Minified-LPE-PoC",
"full_name": "JimmyPughtron\/CVE-2026-31431-Copy-Fail---Minified-LPE-PoC",
"owner": {
"login": "JimmyPughtron",
"id": 156475176,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156475176?v=4",
"html_url": "https:\/\/github.com\/JimmyPughtron",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/JimmyPughtron\/CVE-2026-31431-Copy-Fail---Minified-LPE-PoC",
"description": "CVE-2026-31431-CopyFail---Minified-LPE-PoC",
"fork": false,
"created_at": "2026-05-21T19:43:50Z",
"updated_at": "2026-05-22T13:25:26Z",
"pushed_at": "2026-05-21T20:09:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-31431-copy-fail-privilege-escalation-lpe"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1246118193,
"name": "copyfail-alpine",
"full_name": "4n4s4zi\/copyfail-alpine",
"owner": {
"login": "4n4s4zi",
"id": 160362386,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/160362386?v=4",
"html_url": "https:\/\/github.com\/4n4s4zi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/4n4s4zi\/copyfail-alpine",
"description": "More portable PoC of copyfail LPE (CVE-2026-31431) that works on Alpine Linux",
"fork": false,
"created_at": "2026-05-21T22:24:45Z",
"updated_at": "2026-10-09T14:02:58Z",
"pushed_at": "2026-06-04T01:15:00Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"alpine-linux",
"copyfail",
"cve-2026-31431",
"cve-2026-31431-poc"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1247113589,
"name": "linux-kernel-algif-aead-checker",
"full_name": "ridhinva\/linux-kernel-algif-aead-checker",
"owner": {
"login": "ridhinva",
"id": 52518646,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52518646?v=4",
"html_url": "https:\/\/github.com\/ridhinva",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ridhinva\/linux-kernel-algif-aead-checker",
"description": "Scanner: CVE-2026-31431 Linux kernel algif_aead Copy Fail vulnerability checker — Python PoC for heap overflow path",
"fork": false,
"created_at": "2026-05-22T23:15:41Z",
"updated_at": "2026-08-07T20:38:51Z",
"pushed_at": "2026-08-07T20:22:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cli",
"cve",
"kernel",
"linux",
"pentesting",
"python",
"scanner",
"security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1248333828,
"name": "copy_fail",
"full_name": "Iamliuxiaozhen\/copy_fail",
"owner": {
"login": "Iamliuxiaozhen",
"id": 149680880,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149680880?v=4",
"html_url": "https:\/\/github.com\/Iamliuxiaozhen",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Iamliuxiaozhen\/copy_fail",
"description": "copy_fail:CVE-2026-31431",
"fork": false,
"created_at": "2026-05-24T14:04:08Z",
"updated_at": "2026-05-26T12:56:14Z",
"pushed_at": "2026-05-26T12:56:09Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": true,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"ai-security",
"cve-2026-31431",
"exploit",
"linux-kernel",
"privilege-escalation",
"privilege-escalation-exploits",
"security-research",
"theoriz",
"vulnerability",
"xint-code"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1252414751,
"name": "CVE-2026-31431",
"full_name": "songzzzz\/CVE-2026-31431",
"owner": {
"login": "songzzzz",
"id": 49892169,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49892169?v=4",
"html_url": "https:\/\/github.com\/songzzzz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/songzzzz\/CVE-2026-31431",
"description": "aarch64 and x64 python POC",
"fork": false,
"created_at": "2026-05-28T13:52:15Z",
"updated_at": "2026-05-28T14:06:47Z",
"pushed_at": "2026-05-28T14:05:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1252866662,
"name": "Detection-Tool-Kit-for-CVE-2026-31431",
"full_name": "vishvacyber\/Detection-Tool-Kit-for-CVE-2026-31431",
"owner": {
"login": "vishvacyber",
"id": 163949253,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163949253?v=4",
"html_url": "https:\/\/github.com\/vishvacyber",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/vishvacyber\/Detection-Tool-Kit-for-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-29T00:29:50Z",
"updated_at": "2026-05-29T00:32:01Z",
"pushed_at": "2026-05-29T00:31:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1256218491,
"name": "Copyfail-sh",
"full_name": "nonameuserosint-hue\/Copyfail-sh",
"owner": {
"login": "nonameuserosint-hue",
"id": 228878893,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/228878893?v=4",
"html_url": "https:\/\/github.com\/nonameuserosint-hue",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nonameuserosint-hue\/Copyfail-sh",
"description": "A Bash implementation of copyfail (CVE-2026-31431)",
"fork": false,
"created_at": "2026-06-01T15:13:01Z",
"updated_at": "2026-06-01T15:13:01Z",
"pushed_at": "2026-05-14T11:42:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1256412982,
"name": "CVE-2026-31431-simple-test",
"full_name": "tematemaru\/CVE-2026-31431-simple-test",
"owner": {
"login": "tematemaru",
"id": 11376031,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11376031?v=4",
"html_url": "https:\/\/github.com\/tematemaru",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tematemaru\/CVE-2026-31431-simple-test",
"description": null,
"fork": false,
"created_at": "2026-06-01T18:53:44Z",
"updated_at": "2026-10-07T23:26:37Z",
"pushed_at": "2026-07-16T20:06:39Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1258090810,
"name": "CopyFail",
"full_name": "1neptune\/CopyFail",
"owner": {
"login": "1neptune",
"id": 76670255,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76670255?v=4",
"html_url": "https:\/\/github.com\/1neptune",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/1neptune\/CopyFail",
"description": "go CVE-2026-31431 (CopyFail) local privilege escalation exploit",
"fork": false,
"created_at": "2026-06-03T09:11:12Z",
"updated_at": "2026-07-30T02:04:19Z",
"pushed_at": "2026-06-03T09:14:11Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1259895891,
"name": "copy-fail-CVE-2026-31431",
"full_name": "zs1n\/copy-fail-CVE-2026-31431",
"owner": {
"login": "zs1n",
"id": 209989581,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/209989581?v=4",
"html_url": "https:\/\/github.com\/zs1n",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/zs1n\/copy-fail-CVE-2026-31431",
"description": "Exploit for Copy-Fail Vulnerability - Python3 Version",
"fork": false,
"created_at": "2026-06-05T01:05:38Z",
"updated_at": "2026-06-05T01:06:02Z",
"pushed_at": "2026-06-05T01:05:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1260280816,
"name": "CVE-2026-31431-Copy-Fail",
"full_name": "t1ckprivate\/CVE-2026-31431-Copy-Fail",
"owner": {
"login": "t1ckprivate",
"id": 256938688,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/256938688?v=4",
"html_url": "https:\/\/github.com\/t1ckprivate",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/t1ckprivate\/CVE-2026-31431-Copy-Fail",
"description": null,
"fork": false,
"created_at": "2026-06-05T10:27:36Z",
"updated_at": "2026-06-05T10:47:38Z",
"pushed_at": "2026-06-05T10:47:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1278804377,
"name": "rootpacket-cve-2026-31431",
"full_name": "kinryulabs\/rootpacket-cve-2026-31431",
"owner": {
"login": "kinryulabs",
"id": 296103256,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/296103256?v=4",
"html_url": "https:\/\/github.com\/kinryulabs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kinryulabs\/rootpacket-cve-2026-31431",
"description": "CVE-2026-31431 getroot from a Turkish Cryptominer",
"fork": false,
"created_at": "2026-06-24T05:41:21Z",
"updated_at": "2026-07-26T15:23:16Z",
"pushed_at": "2026-06-24T10:21:00Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1282304882,
"name": "CVE-2026-31431",
"full_name": "SugiB3o\/CVE-2026-31431",
"owner": {
"login": "SugiB3o",
"id": 24741216,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24741216?v=4",
"html_url": "https:\/\/github.com\/SugiB3o",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SugiB3o\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-06-27T15:41:53Z",
"updated_at": "2026-06-27T15:46:07Z",
"pushed_at": "2026-06-27T15:46:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1290743243,
"name": "Linux-Kernel-Copy-Fail-CVE-2026-31431-",
"full_name": "jihwan77\/Linux-Kernel-Copy-Fail-CVE-2026-31431-",
"owner": {
"login": "jihwan77",
"id": 188286798,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188286798?v=4",
"html_url": "https:\/\/github.com\/jihwan77",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jihwan77\/Linux-Kernel-Copy-Fail-CVE-2026-31431-",
"description": "AF_ALG\/splice 기반 Linux Page Cache 변조 취약점 분석 및 대응 실습",
"fork": false,
"created_at": "2026-07-06T07:46:49Z",
"updated_at": "2026-07-06T10:45:31Z",
"pushed_at": "2026-07-06T10:45:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1318212596,
"name": "SG-2026-0013",
"full_name": "TeamN4C\/SG-2026-0013",
"owner": {
"login": "TeamN4C",
"id": 295141842,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/295141842?v=4",
"html_url": "https:\/\/github.com\/TeamN4C",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TeamN4C\/SG-2026-0013",
"description": "CVE-2026-31431 Copy Fail PoC and exploit",
"fork": false,
"created_at": "2026-07-31T10:10:17Z",
"updated_at": "2026-07-31T10:16:46Z",
"pushed_at": "2026-07-31T10:21:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1320939337,
"name": "CVE-2026-31431-copy-fail",
"full_name": "TrevoCastles\/CVE-2026-31431-copy-fail",
"owner": {
"login": "TrevoCastles",
"id": 253486909,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/253486909?v=4",
"html_url": "https:\/\/github.com\/TrevoCastles",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TrevoCastles\/CVE-2026-31431-copy-fail",
"description": null,
"fork": false,
"created_at": "2026-08-02T23:15:19Z",
"updated_at": "2026-10-02T23:47:43Z",
"pushed_at": "2026-08-02T23:39:20Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1323166480,
"name": "CVE-2026-31431",
"full_name": "dev1681\/CVE-2026-31431",
"owner": {
"login": "dev1681",
"id": 313043042,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/313043042?v=4",
"html_url": "https:\/\/github.com\/dev1681",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dev1681\/CVE-2026-31431",
"description": "copyfail poc here",
"fork": false,
"created_at": "2026-08-04T16:38:07Z",
"updated_at": "2026-08-04T16:41:54Z",
"pushed_at": "2026-08-04T16:40:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1323532777,
"name": "copyfail-guard",
"full_name": "joaocalciolari07\/copyfail-guard",
"owner": {
"login": "joaocalciolari07",
"id": 219327560,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/219327560?v=4",
"html_url": "https:\/\/github.com\/joaocalciolari07",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/joaocalciolari07\/copyfail-guard",
"description": "Defensive detection & mitigation tool for CVE-2026-31431 (\"Copy Fail\") — Linux kernel algif_aead LPE. No exploit code included.",
"fork": false,
"created_at": "2026-08-05T01:58:08Z",
"updated_at": "2026-08-05T01:58:43Z",
"pushed_at": "2026-08-05T01:58:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1357235109,
"name": "cve-2026-31431",
"full_name": "FranklinF25\/cve-2026-31431",
"owner": {
"login": "FranklinF25",
"id": 96183613,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96183613?v=4",
"html_url": "https:\/\/github.com\/FranklinF25",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/FranklinF25\/cve-2026-31431",
"description": "CVE-2026-31431 — Linux kernel algif_aead 'Copy Fail' page-cache write: analysis, safe detector, in-lab LPE",
"fork": false,
"created_at": "2026-09-04T14:26:35Z",
"updated_at": "2026-11-01T01:33:37Z",
"pushed_at": "2026-11-01T01:33:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"exploit",
"kernel",
"linux-kernel",
"lpe",
"security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1357372406,
"name": "copy-fail-CVE-2026-31431-cpp",
"full_name": "silentbyte69\/copy-fail-CVE-2026-31431-cpp",
"owner": {
"login": "silentbyte69",
"id": 238855325,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/238855325?v=4",
"html_url": "https:\/\/github.com\/silentbyte69",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/silentbyte69\/copy-fail-CVE-2026-31431-cpp",
"description": "https:\/\/github.com\/theori-io\/copy-fail-CVE-2026-31431 but ported to c++ for fun",
"fork": false,
"created_at": "2026-09-04T16:35:59Z",
"updated_at": "2026-09-04T16:52:33Z",
"pushed_at": "2026-09-04T16:37:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1375717333,
"name": "copyfail",
"full_name": "Minime794\/copyfail",
"owner": {
"login": "Minime794",
"id": 288131995,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288131995?v=4",
"html_url": "https:\/\/github.com\/Minime794",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Minime794\/copyfail",
"description": "Copy-Fail-Exploit-CVE-2026-31431",
"fork": false,
"created_at": "2026-09-18T10:37:39Z",
"updated_at": "2026-09-18T10:46:42Z",
"pushed_at": "2026-09-18T10:46:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1394890628,
"name": "Copy-Fail-CVE-2026-31431-Kubernetes-PoC",
"full_name": "rifkyards\/Copy-Fail-CVE-2026-31431-Kubernetes-PoC",
"owner": {
"login": "rifkyards",
"id": 101003494,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/101003494?v=4",
"html_url": "https:\/\/github.com\/rifkyards",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/rifkyards\/Copy-Fail-CVE-2026-31431-Kubernetes-PoC",
"description": "PoC: fully unprivileged container escape to node-level code execution on Kubernetes via CVE-2026-31431 page-cache corruption + shared image layers. Validated on Alibaba Cloud ACK, Amazon EKS and Google GKE.",
"fork": false,
"created_at": "2026-09-29T10:07:19Z",
"updated_at": "2026-11-05T03:01:13Z",
"pushed_at": "2026-05-07T09:04:29Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1404618922,
"name": "copyfail-check-skill",
"full_name": "ledlight33\/copyfail-check-skill",
"owner": {
"login": "ledlight33",
"id": 130779050,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130779050?v=4",
"html_url": "https:\/\/github.com\/ledlight33",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ledlight33\/copyfail-check-skill",
"description": "Read-only Copy Fail (CVE-2026-31431) check, packaged as an agent skill",
"fork": false,
"created_at": "2026-10-04T16:26:59Z",
"updated_at": "2026-10-04T17:47:03Z",
"pushed_at": "2026-10-04T17:47:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"agent-skills",
"cve-2026-31431",
"dfir",
"digital-forensics",
"incident-response",
"linux",
"security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1422729639,
"name": "CVE-2026-31431-Copy-Fail",
"full_name": "Industri4l-H3ll-Xpl0it3rs\/CVE-2026-31431-Copy-Fail",
"owner": {
"login": "Industri4l-H3ll-Xpl0it3rs",
"id": 262636091,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/262636091?v=4",
"html_url": "https:\/\/github.com\/Industri4l-H3ll-Xpl0it3rs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Industri4l-H3ll-Xpl0it3rs\/CVE-2026-31431-Copy-Fail",
"description": "CVE-2026-31431 Exploit | by infrar3d",
"fork": false,
"created_at": "2026-10-16T22:27:35Z",
"updated_at": "2026-10-16T22:28:36Z",
"pushed_at": "2026-10-16T22:28:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"exploit"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430772110,
"name": "CVE-2026-31431",
"full_name": "StackOverflowExcept1on\/CVE-2026-31431",
"owner": {
"login": "StackOverflowExcept1on",
"id": 109800286,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109800286?v=4",
"html_url": "https:\/\/github.com\/StackOverflowExcept1on",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/StackOverflowExcept1on\/CVE-2026-31431",
"description": "Copy Fail exploit for Ubuntu 20.04 with legacy Python versions, including script to hide Copy Fail.",
"fork": false,
"created_at": "2026-10-23T08:21:40Z",
"updated_at": "2026-10-26T20:26:42Z",
"pushed_at": "2026-10-23T14:06:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"copy-fail",
"cve-2026-31431",
"exploit",
"local-privilege-escalation",
"lpe",
"poc",
"security"
],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1437369178,
"name": "copy-fail-CVE-2026-31431-aarch64",
"full_name": "Venshell\/copy-fail-CVE-2026-31431-aarch64",
"owner": {
"login": "Venshell",
"id": 234729054,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/234729054?v=4",
"html_url": "https:\/\/github.com\/Venshell",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Venshell\/copy-fail-CVE-2026-31431-aarch64",
"description": "Linux 4.19 aarch64 PoC for CVE-2026-31431 (Copy Fail) - AF_ALG\/authencesn page-cache write",
"fork": false,
"created_at": "2026-10-28T16:49:52Z",
"updated_at": "2026-10-30T13:59:38Z",
"pushed_at": "2026-10-30T13:59:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"aarch64",
"af-alg",
"cve-2026-31431",
"linux-kernel",
"poc",
"privilege-escalation"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1444786995,
"name": "CVE-2026-31431",
"full_name": "abiyeenzo\/CVE-2026-31431",
"owner": {
"login": "abiyeenzo",
"id": 93532759,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93532759?v=4",
"html_url": "https:\/\/github.com\/abiyeenzo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/abiyeenzo\/CVE-2026-31431",
"description": "Research PoC for Linux Kernel LPE (CVE-2026-31431 - Copy Fail). Educational and security research purposes only.",
"fork": false,
"created_at": "2026-11-03T20:15:37Z",
"updated_at": "2026-11-04T19:11:27Z",
"pushed_at": "2026-11-04T19:11:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
Reference in new issue View Git Blame Copy Permalink