Home / Security updates / CVE 2026 31431 (“Copy Fail”) - Linux Kernel Privilege Escalation
CVE 2026 31431 (“Copy Fail”) - Linux Kernel Privilege Escalation
Security updates detail rendered from /security-updates/upd_58bfd83e3afc6a8f.
Overview
| ID | upd_58bfd83e3afc6a8f |
| Collection | Security Updates |
| Provider | SafeBase |
| Company | Data Intensity |
| URL | - |
| Counts | - |
| Updated | - |
Raw record
| Field | Value |
|---|---|
| id | upd_58bfd83e3afc6a8f |
| providerId | safebase |
| organizationId | org_a12b1d753425b571 |
| trustCenterId | tc_7629a3e02e64d865 |
| title | CVE 2026 31431 (“Copy Fail”) - Linux Kernel Privilege Escalation |
| message | Data Intensity is notifying customers of a newly disclosed high severity Linux kernel vulnerability, CVE-2026-31431, commonly referred to as “Copy Fail.” This vulnerability allows a local, unprivileged user to reliably escalate privileges to root on affected Linux systems. While Copy Fail is not remotely exploitable by itself, it poses significant risk when combined with: - Existing application vulnerabilities - Compromised user credentials - Multiuser or multi-tenant Linux environments - Containerized or Kubernetes workloads This vulnerability as high risk, and proof of concept exploits are already publicly available, increasing the likelihood of real world misuse. Most major Linux distributions have released official security advisories and kernel updates, including Oracle Enterprise Linux for Oracle Linux 7, 8, 9, and 10, addressing CVE 2026 31431. The fix removes the unsafe in place operation and restores secure out of place processing. Any update applied will require a system r |
| url | - |
| publishedAt | 2026-05-04 |
| source | {
"field": "statuspage/public/compliance-update",
"category": "vulnerabilities"
} |
| company | {
"id": "org_a12b1d753425b571",
"name": "Data Intensity",
"domains": [
"trust.dataintensity.com",
"dataintensity.com"
]
} |
| trust_center | {
"id": "tc_7629a3e02e64d865",
"name": "Data Intensity",
"url": "https://trust.dataintensity.com",
"host": "trust.dataintensity.com"
} |
| provider | {
"id": "safebase",
"name": "SafeBase"
} |
| links | {
"self": "/v1/security-updates/upd_58bfd83e3afc6a8f",
"company": "/v1/companies/org_a12b1d753425b571",
"trust_center": "/v1/trust-centers/tc_7629a3e02e64d865",
"provider": "/v1/providers/safebase"
} |
Get this page with API
Rendered from the bluedoor Trust Centers API. Reproduce it:
GET https://api.bluedoor.sh/trust-centers/v1/security-updates/upd_58bfd83e3afc6a8fJSON