Copy.Fail: When the Kernel Trusts Too Much

Sometimes you hit a vulnerability that isn’t just “bad”.

It’s clean.

Not elegant. Not pretty.

But clean in the way it slices straight through assumptions we’ve quietly depended on for years.

CVE-2026-31431 is one of those.

The shape of the …

Cover Photo by Joe Zlomek on Unsplash

In this post, I’m going to talk about something that I discovered whilst working on a project a little while ago, some default behaviour in the Microsoft Azure Linux VM Agent which can lead to credential/secret leakage in your linux VM.

What is the …