CopyFail (CVE-2026-31431): Linux kernel page-cache PrivEsc PoC + the only public detection tool. Novel PAM auth-bypass vector + Sigma/auditd/eBPF rules.
rust security linux-kernel auditd ebpf no-std privilege-escalation page-cache af-alg purple-team detection-engineering sigma-rules cve-2026-31431 copyfail
-
Updated
Apr 30, 2026 - Rust