I spent the last couple of days examining the source code and understanding the Copy

[jadi@mastodon.bsd.cafe]

I spent the last couple of days examining the source code and understanding the Copy.Fail vulnerability in detail. This vulnerability happens on the shoulders of 4 key components:

- Page cache
- AF_ALG
- algif_aead
- splice()

In this video, I talk about these components and demonstrate how the CVE-2026-31431 vulnerability allows attackers to gain root access by modifying the “su” entry in the page cache.

https://youtu.be/OftLQ1uPh4M

#copyfail #linux #video