CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments

2026-05-03T02:52:12Z3b634a1ca3f8cc5670030b49eed73badbbf27e54aa4d93f88ab7aba5f4b8397d
CVE-2026-31431Copy_Failcloudexploit_in_the_wildkernelkuberneteslinuxmicrosoft_security_blogprivilege_escalationroot

What happened

CVE-2026-31431 ("Copy Fail") is a high-severity Linux vulnerability that enables local root privilege escalation across cloud environments and Kubernetes workloads. Microsoft reports a working exploit in the wild and urges rapid detection, mitigation, and patching to reduce risk to affected Linux hosts and containerized workloads.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
microsoft_security_blog
Record identifier
3b634a1ca3f8cc5670030b49eed73badbbf27e54aa4d93f88ab7aba5f4b8397d
Enrichment time
2026-05-03T02:52:12Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments · Baitaphish