Coverage for Dirty Frag and Copy Fail vulnerabilities in Threat Feeds
search cancel

Coverage for Dirty Frag and Copy Fail vulnerabilities in Threat Feeds

book

Article ID: 440889

calendar_today

Updated On:

Products

Carbon Black EDR

Issue/Introduction

Carbon Black EDR Server did not have out of the box coverage for vulnerabilities CVE-2026-31431, CVE-2026-43500 and CVE-2026-43284 (known as Dirty Frag and Copy Fail). 

Environment

  • Carbon Black EDR Server: All Versions
  • Carbon Black EDR Linux Sensor: All Supported Versions
  • Linux OS: Supported Versions

Cause

This was a newly identified vulnerability that needed a new detection created.

Resolution

New feed reports have been pushed to production to cover the DirtyFrag and Copy Fail vulnerability. The new report is available in CbCommunity Feeds and already synchronized with EDR environments where the feed is enabled.

Additional Information

CVEs attempted to be covered under two new reports:

CVE-2026-31431
CVE-2026-43500
CVE-2026-43284