Nine-year-old high-severity Linux bug discovered
The vulnerability has been named “Copy Fail” (CVE-2026-31431, CVSS 7.8, high severity) and was discovered by the Xint Code Research Team at bug bounty platform Theori.
Copy Fail is a logic flaw in the Linux kernel. It arose following an optimisation in 2017 which inadvertently blurred a safety boundary between read‑only file data and writable memory during cryptographic operations.