Linux Kernel Privilege Escalation to Root Vulnerabilities Tracker
Cybersecurity uses this top-level document to track the variants of the "Copy Fail" class of Linux LPE vulnerabilities.
The following KB documents describe the variants, contain links to any proof-of-concept exploits, and links to mitigation guidance:
Cybersecurity Announcement: Linux Kernel Privilege Escalation to Root Vulnerability - Copy Fail (CVE-2026-31431)
Cybersecurity Announcement: Linux Kernel Privilege Escalation to Root Vulnerability - Dirty Frag/Copy Fail 2/Fragnesia
Cybersecurity Announcement: Linux Kernel Privilege Escalation to Root Vulnerability - Dirty Decrypt (CVE-2026-31635)
Cybersecurity Announcement: Linux Kernel Privilege Escalation to Root Vulnerability - PinTheft