Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC
View on GitHub ↗ ★ 194 C
PoC: fully unprivileged container escape to node-level code execution on Kubernetes via CVE-2026-31431 page-cache corruption + shared image layers. Validated on Alibaba Cloud ACK, Amazon EKS and Google GKE.
4 mentions on Hacker News by 4 people: 0 stories, 4 comments · first 2026-05-07 · latest 2026-05-08
20082026
-
This is kind of an odd article to me. The point that podman may provide better isolation that Docker is made, but copy fail part focuses on the sample exploit (that overwrote su) which is not super applicable to containerised environments,…
comment by raesene9 · 2026-05-08 · in Podman rootless containers and the Copy Fail exploit -
Copy Fail can't affect files it can't access. PoC attack on k8s [1] claims execution through sibling layers of kube-proxy, host filesystem access through /dev/ [2]. [1] https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kuber... [2]…
comment by sergeykish · 2026-05-08 · in Maybe you shouldn't install new software for a bit -
I got the same running it inside a container, but got a shell when running it directly in the host. This only shows that the exploit doesn't work inside a container. So, containers aren't vulnerable, or the script needs some adjustments to…
comment by stsewd · 2026-05-08 · in Dirty Frag: Universal Linux LPE -
With the exploits published as-is, you'll only get root inside the container: there's no explicit namespace break, and calling setuid() in a container just gives you root in the container. However, it can be used to modify files that are…
comment by lights0123 · 2026-05-07 · in Dirty Frag: Universal Linux LPE