美国网络安全和基础设施安全局（CISA）警告称，一个被称为“Copy Fail”（CVE-2026-31431）的关键Linux内核漏洞目前正被积极利用。该漏洞允许未经授权的本地用户将权限提升至root级别，影响Ubuntu、Amazon Linux、RHEL和SUSE等主要发行版。Theori的研究人员同时披露了该漏洞和一个可靠的概念验证（PoC）利用代码，导致其迅速被列入CISA的已知被利用漏洞目录，并要求联邦机构在两周内进行修补。 AI
影响 凸显了AI发现的漏洞被迅速武器化的风险日益增加，迫使组织加快补丁修复周期。
排序理由 CISA标记了一个已被积极利用且存在公开利用代码的漏洞，促使联邦机构紧急修补。
AI 生成摘要 · Google Gemini · 来自 5 个来源。 我们如何撰写摘要 →
CISA warns of the actively exploited “Copy Fail” Linux flaw (CVE-2026-31431), enabling root access, with a public exploit released before patches were ready.
<h4>Researchers dropped a reliable root exploit and it didn’t sit idle for long</h4> <p>CISA is warning that a newly-disclosed Linux kernel bug dubbed "CopyFail" is already being exploited, just days after researchers dropped a working root-level exploit.…</p>
Researchers dropped a reliable root exploit and it didn’t sit idle for long
CISA flags actively exploited ‘Copy Fail’ Linux kernel flaw enabling root takeover across major distros — unpatched systems may remain vulnerable to attack CISA warns of the actively exploited “Copy Fail” Linux flaw (CVE-2026-31431), enabling root access, with a public exploit re…
Copy Fail (CVE-2026-31431), disclosed Wednesday by security firm Theori, lets any local # Linux user gain root access on # Ubuntu , Amazon Linux, # RHEL , and # SUSE . The bug traces to a 2017 optimization in the kernel’s AEAD crypto path; an # AI powered scanner reportedly found…