![\"\"](\"https:\/\/www.deepin.org\/wp-content\/uploads\/2026\/04\/\u516c\u4f17\u53f7\u7cfb\u5217-10\u526f\u672c_\u526f\u672c.png\")
<\/p>\nDear deepin users and community partners,<\/p>\n
Recently, the deepin community detected a high-risk local privilege escalation vulnerability in the Linux kernel.<\/p>\n
This vulnerability, dubbed \"Copy Fail\" (CVE-2026-31431), exists in the Linux kernel cryptographic subsystem (the\u00a0 Given its severity and widespread impact, we strongly recommend that all users upgrade as soon as possible to ensure the security of your systems.<\/p>\n <\/p>\n CVE ID:<\/strong> CVE-2026-31431<\/p>\n Description:<\/strong>\u00a0This vulnerability stems from a logical flaw in the\u00a0 Severity:<\/strong> High<\/p>\n Exploitation Prerequisites:<\/strong> An attacker only needs local unprivileged user access to launch the attack.<\/p>\n Affected Scope:<\/strong>\u00a0All users running an unpatched deepin 25 are affected. Immediate update and upgrade are recommended.<\/p>\n <\/p>\n Dear deepin users and community partners, Recently, the deepin community detected a high-risk local privilege escalation vulnerability in the Linux kernel. This vulnerability, dubbed \"Copy Fail\" (CVE-2026-31431), exists in the Linux kernel cryptographic subsystem (the\u00a0algif_aead module). It originates from a code optimization introduced in 2017, which causes the AF_ALG cryptographic interface to potentially share the same kernel page cache page between the source and destination buffers when processing AEAD cryptographic operations. Given its severity and widespread impact, we strongly recommend that all users upgrade as soon as possible to ensure the security of your systems. I. Vulnerability Information CVE ...Read more<\/a><\/p>\n","protected":false},"author":18825,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[75,93],"tags":[],"_links":{"self":[{"href":"https:\/\/www.deepin.org.cn\/en\/wp-json\/wp\/v2\/posts\/38942"}],"collection":[{"href":"https:\/\/www.deepin.org.cn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.deepin.org.cn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.deepin.org.cn\/en\/wp-json\/wp\/v2\/users\/18825"}],"replies":[{"embeddable":true,"href":"https:\/\/www.deepin.org.cn\/en\/wp-json\/wp\/v2\/comments?post=38942"}],"version-history":[{"count":3,"href":"https:\/\/www.deepin.org.cn\/en\/wp-json\/wp\/v2\/posts\/38942\/revisions"}],"predecessor-version":[{"id":38949,"href":"https:\/\/www.deepin.org.cn\/en\/wp-json\/wp\/v2\/posts\/38942\/revisions\/38949"}],"wp:attachment":[{"href":"https:\/\/www.deepin.org.cn\/en\/wp-json\/wp\/v2\/media?parent=38942"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.deepin.org.cn\/en\/wp-json\/wp\/v2\/categories?post=38942"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.deepin.org.cn\/en\/wp-json\/wp\/v2\/tags?post=38942"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}algif_aead<\/code> module). It originates from a code optimization introduced in 2017, which causes the AF_ALG cryptographic interface to potentially share the same kernel page cache page between the source and destination buffers when processing AEAD cryptographic operations.<\/p>\nI. Vulnerability Information<\/strong><\/h2>\n
algif_aead<\/code>\u00a0module of the Linux kernel cryptographic subsystem. A 2017 optimization introduced in-place operations, leading to inconsistent memory mappings for source and destination during associated data (AD) processing. As a result, kernel page cache pages can be mixed into a writable scatterlist. By combining the AF_ALG cryptographic interface with the\u00a0splice()<\/code>\u00a0system call, an attacker can write 4 bytes of controlled data into the page cache of any readable file (e.g., the setuid program\u00a0\/usr\/bin\/su<\/code>). Since the page cache is shared by all processes on the same kernel, tampering with a setuid program and subsequently executing it can grant root privileges.<\/p>\nII. Fix Progress<\/strong><\/h2>\n
\n