GCP-2026-028 — Published: 2026-05-05Updated: 2026-05-27Description Description Severity Notes CVE-2026-31431, also known as "Copy Fail," is a…

Published: 2026-05-05Updated: 2026-05-27Description Description Severity Notes CVE-2026-31431, also known as "Copy Fail," is a high-severity local privilege escalation (LPE) vulnerability in the Linux kernel that allows an unprivileged user to gain root access. Disclosed in late April 2026, it stems from a logic flaw in the kernel's cryptographic subsystem (algif_aead) introduced in 2017. What should I do? Google recommends that customers protect their Linux Guest VMs by updating the kernel on all Linux VMs. Major distributions have released or are rolling out fixes. High CVE-2026-31431