A Linux kernel vulnerability, CVE-2026-31431 dubbed Copy Fail, allows an unprivileged local user to gain root by corrupting the page cache of readable files such as /usr/bin/su. The disk file is not modified, so normal file-integrity checks may not detect exploitation. Affected systems include Linux distributions shipping vulnerable kernels with the AF_ALG AEAD in-place path. […] The post Linux Kernel Bug (Copy.Fail) Enables Local Privilege Escalation to Root (CVE-2026-31431) appeared first on Orca Security .