Mitigating 'Copy Fail' Vulnerability (CVE-2026-31431) using Advanced Cluster Management Governance Policy

Issue

This article outlines two mitigation strategies for the "Copy Fail" vulnerability (CVE-2026-31431, referenced in RHSB-2026-02 and Red Hat Knowledgebase article 7141931) using a Governance Policy within Red Hat Advanced Cluster Management for Kubernetes (ACM). Below two options are provided to block access to the vulnerable kernel functions can be blocked either through a kernel argument or via a DaemonSet which deploys a small eBPF program blocking access. For more details on mitigations for OpenShift refer to the solution How to Mitigate issue mentioned in CVE-2026-31431 in OpenShift 4.