Experts in cybersecurity have alerted users to a fresh logical error in Linux, dubbed Copy Fail (CVE-2026-31431), representing a high-severity issue that endangers everyone using Linux-powered systems.
The discovery by Xint Code highlights a problem within Linux's authenc encryption framework, allowing a non-privileged local user to execute a predictable, targeted four-byte modification in the page cache of any accessible file across the system. Essentially, this means an individual could alter the in-memory cached representation of any file without modifying the actual on-disk version.
Attackers might exploit this weakness to damage the cached data of a high-level process, misleading the operating system to provide the attacker with elevated permissions, including complete control over admin-level operations. Through Copy Fail, malicious actors could retrieve confidential data and deploy persistent malware.
As reported by Ars Technica, this marks the gravest Linux security issue since the 2022 Dirty Pipe incident. Copy Fail stands out from previous escalation bugs due to its nature as a 'straight-line logic error,' eliminating requirements for timing-based exploits like those in Dirty Cow or exact handling of pipe buffers.
Additionally, its portability allows a single Python demonstration script to compromise leading Linux variants universally, without recompilation for various architectures or compatibility verifications. For deeper insights, consult the detailed analysis on Xint's website.
On a positive note, patches for the Copy Fail issue are available in Linux kernel releases 7.0, 6.19.12, 6.18.12, 6.12.85, 6.6.137, 6.1.170, 5.15.204, and 5.10.254. Linux system owners are urged to upgrade their kernels promptly.
The piece first ran in our affiliated outlet PC för Alla, adapted and translated from its Swedish origins.
Mikael covers developments in various consumer technology sectors for us. With past experience at Macworld, he now focuses contributions on affiliates like PC för Alla and M3. He maintains strong knowledge of new device launches, updates in streaming platforms, and emerging artificial intelligence applications.