Add aarch64 PoC script (copy_fail_exp_aarch64.py)

[DengShunChen]

Add aarch64 PoC script (copy_fail_exp_aarch64.py)

Summary

Adds copy_fail_exp_aarch64.py, an aarch64 / arm64 proof-of-concept for CVE-2026-31431 (“Copy Fail”). It mirrors the existing copy_fail_exp.py flow (same trigger path); the only functional difference is the zlib-embedded ELF, which targets EM_AARCH64 instead of x86_64.

Changes

• New file: copy_fail_exp_aarch64.py

Usage

• x86_64: python3 copy_fail_exp.py
• aarch64: python3 copy_fail_exp_aarch64.py

Notes

• For authorized security research and patch validation only; do not use on systems you do not own or lack permission to test.
• Success on aarch64 still depends on kernel/build conditions described in the writeup; the README “tested distro / kernel” table currently reflects the original x86_64 validation—follow up with a separate PR if you confirm specific arm64 matrix entries.

Checklist (optional)

• Manually exercised on a target aarch64 environment, or reviewed as an architecture-specific payload swap only
• No merge conflicts with main

[user@b03 copy-fail-CVE-2026-31431]$ id
uid=1234(user) gid=5000(user) groups=5000(user)
[user@b03 copy-fail-CVE-2026-31431]$ python copy_fail_exp_aarch64.py
[root@b03 copy-fail-CVE-2026-31431]# id
uid=0(root) gid=5000(user) groups=5000(user)

[baonq-me]

Can you show your distro/kernel version ?

copyfail@lucky:~$ python3 test-copy-fail.py
[*] CVE-2026-31431 detector  kernel=6.14.0-37-generic  arch=aarch64
[+] Precondition not met ('authencesn(hmac(sha256),cbc(aes))' cannot be instantiated (No such file or directory)). NOT vulnerable.
copyfail@lucky:~$

[xeloxa]

https://github.com/xeloxa/copyfail-exploit

[DengShunChen]

https://github.com/xeloxa/copyfail-exploit

You did a great job!