Hello, Following up on the previous discussion about CVE-2026-31431 (Copy Fail).
A new public repository with fully functional exploit code was published today (2026-05-18) on GitHub: https://github.com/4xura/CVE-2026-31431-CopyFail The repository contains: - exploit.c, exploit.py, exploit.pl, exploit.asm (x86_64 NASM) - proof-of-concept: copyfail_poc.c, copyfail_poc.py - bpftrace diagnostic scripts for AF_ALG + splice path Attack vector: AF_ALG socket (Linux Crypto API) + splice() syscall, targeting filemap_splice and authencesn decrypt path. As noted by Willy Tarreau, all stable kernels were patched on April 30. Systems running unpatched kernels remain at risk. Regards, Andrei Berestov
