CVE-2026-31431 is a 9-year-old Linux kernel LPE.
A 732-byte Python exploit corrupts /usr/bin/su in memory while disk stays clean.
I reproduced it in a public lab. Inner Warden caught the page-cache divergence in 5s and evicted the poisoned page.
#cybersecurity#copyfail#linux