## https://sploitus.com/exploit?id=35580C90-EE3C-5009-AF6C-BB6C2A516165
# Copy-fail-CVE-2026-31431-Exploit-in-C
Discovery and original disclosure of CVE-2026-31431: Theori / Xint. Public writeup: https://copy.fail/.
## Overview
This program targets the Linux kernel’s AF_ALG AEAD path and attempts to trigger the “Copy Fail” page-cache corruption behavior described in public advisories.
The code opens a chosen file, repeatedly processes 4-byte windows of an embedded payload, and uses kernel crypto plumbing plus splice() to influence the cached file contents in memory.
After the loop finishes, it executes the target binary, relying on whatever state the page cache was left in.
## Prerequisites
- Linux environment
- GCC or Clang
## BUILD
``` gcc -o Copy-fail-CVE-2026-31431-Exploit-in-C Copy-fail-CVE-2026-31431.c -D_GNU_SOURCE ```
## Usage
``` ./Copy-fail-CVE-2026-31431-Exploit-in-C ```