Page-Cache vs On-Disk Divergence Alert (CVE-2026-31431)

Elgonad .@elgonad

•updated Apr 30, 2026•2•0•238

Detects alerts generated by page-cache integrity checking tools (e.g., pagecache_diff.py) indicating a divergence between a file's in-memory page cache and its on-disk representation. This is a primary post-exploitation indicator for the Copy Fail vulnerability (CVE-2026-31431), which corrupts the page cache without modifying the physical file to bypass traditional File Integrity Monitoring (FIM).