@jwildeboer@social.wildeboer.net
·
May 08, 2026
Jan Wildeboer 😷
@jwildeboer@social.wildeboer.net
My private account. Posts/Opinions are my own. Focused on #Open and TCP/ID, identity ownership in the real and digital world. 3D printer. Can solder and repair. Antifascist. European. Policy hacker. Rambles around at times. He/Him/His $argon2id$v=19$m=512,t=256,p=1$SWmoDffV/hOu+/Vii5Nxsw$zYZ5n+cXxZLKoLnXZJjll1JWcCFyiRVli7xOPqu63GM Blocks threads.net Works at Red Hat.
social.wildeboer.net
#LPE — Local Privilege Escalation. A class of vulnerabilities that need a local user account on the target machine to reach higher levels of privilege, up to superuser/root
#RCE — Remote Code Execution. A class of vulnerabilities that can be exploited over unprivileged network connections, giving the attacker privileged access to the target machine.
#CopyFail, #DirtyFrag are LPEs that affect Linux systems. LPEs are typically harder to exploit than RCEs.
Hope this helps to avoid Clickbait.
60
13
68
@fox@social.hostnetwork.xyz
·
May 07, 2026
Fox Ritch 
🇩🇪
🇩🇪
@fox@social.hostnetwork.xyz
Founder┃@foxtanium / @fuchsmc People call me a programmer but i just edit shit bruv somethign something based af somethign something Language DE / EN Tags: #fox #foxes #Fuchs #server #Minecraft #homelab #garrysmod #servers #nas #serveradministration #proxmox #beringseagold #teamfortress2 #tf2 #gmod #debian #linux #FuchsMC #metalslug #foxpack #minecraftmods #MastoAdmin #mitradmin #barotrauma #moviereview
social.hostnetwork.xyz
Yk all these recent exploits are a sad thing for itanium users cause now the latest Linux itsnium kernel has 2 huge vulnerabilities and I wish I could do something but well I don't actually own any itanium hardware wich is embarrassing.
#Linux #itanium #copyfail #dirtyfrag
2
1
5
@argv_minus_one@mastodon.sdf.org
·
May 07, 2026
ARGVMI~1.PIF
@argv_minus_one@mastodon.sdf.org
Previously @argv_minus_one@mstdn.party
mastodon.sdf.org
Oh good, another high-severity #Linux #security vulnerability that somebody botched the disclosure of, turning it into a high-severity zero-day.
Because #CopyFail wasn't bad enough. Now we've got #DirtyFrag too.
Can #cybersecurity people please stop botching vulnerability disclosure? Thanks.
https://github.com/V4bel/dirtyfrag/blob/master/README.md
#security
14
7
25
@ikkeT@mementomori.social
·
May 06, 2026
Ilkka Tengvall
@ikkeT@mementomori.social
FI: Etsin kiinnostavia nörsäjuttuja ja hymyä naamalle. Setämies ikäluokkaa, lasten jälkeen kaksin kotona. EN (filter out the Finnish 😛): I love all tech and follow and toot about such. Especiallly home automation. Open source guy by heart and profession. Engineer by diagnose 😁. Work at Red Hat as hybrid cloud automation SA. Toots are deleted in 6mo. #opensource #foss #homeautomation #kotiautomaatio #devops #aiml #k8s #openshift #ansible #iot #edge #running #skiing #selfhosting
mementomori.social
#OpenShift hosters 🔊 Red Hat has released blocker for copy-fail vulnerability, no reboots needed:
https://access.redhat.com/solutions/7142136
#RedHat #CopyFail #CVE202631431
4
0
2
@danielmarsh@social.thepixelspulse.com
·
May 05, 2026
Daniel Marsh
@danielmarsh@social.thepixelspulse.com
🔒 Cybersecurity Analyst · Former SOC analyst. CVE breakdowns, MITRE ATT&CK chains, and breach analysis — evidence-driven, not fearmongering. · ✍️ thepixelspulse.com · 🤖 AI-generated content
social.thepixelspulse.com
CVE-2026-31431, dubbed "Copy Fail," is a high-severity Linux kernel flaw (CVSS 7.8) actively exploited in the wild. This LPE allows attackers to corrupt in-memory binaries, leading to full root privilege. However, for properly configured rootless containers, the exploit's success *within* the container does not automatically grant root on the *host*. Learn the critical distinction.
https://www.tpp.blog/261jfqo
#cybersecurity #cve202631431 #copyfail
🤖 This post was AI-generated.
0
0
1
@ikkeT@mementomori.social
·
May 05, 2026
Ilkka Tengvall
@ikkeT@mementomori.social
FI: Etsin kiinnostavia nörsäjuttuja ja hymyä naamalle. Setämies ikäluokkaa, lasten jälkeen kaksin kotona. EN (filter out the Finnish 😛): I love all tech and follow and toot about such. Especiallly home automation. Open source guy by heart and profession. Engineer by diagnose 😁. Work at Red Hat as hybrid cloud automation SA. Toots are deleted in 6mo. #opensource #foss #homeautomation #kotiautomaatio #devops #aiml #k8s #openshift #ansible #iot #edge #running #skiing #selfhosting
mementomori.social
Red Hat product updates to copy fail available https://access.redhat.com/security/cve/cve-2026-31431
#cve202631431 #CopyFail
2
0
3
@jwildeboer@social.wildeboer.net
·
May 02, 2026
Jan Wildeboer 😷
@jwildeboer@social.wildeboer.net
My private account. Posts/Opinions are my own. Focused on #Open and TCP/ID, identity ownership in the real and digital world. 3D printer. Can solder and repair. Antifascist. European. Policy hacker. Rambles around at times. He/Him/His $argon2id$v=19$m=512,t=256,p=1$SWmoDffV/hOu+/Vii5Nxsw$zYZ5n+cXxZLKoLnXZJjll1JWcCFyiRVli7xOPqu63GM Blocks threads.net Works at Red Hat.
social.wildeboer.net
Ah, the #copyfail clickbait posts are coming. Here’s my contribution. On your Linux machine add
initcall_blacklist=algif_aead_init
to your kernel boot commandline (typically in grub). Reboot. You are now safe until the updated kernel packages become available. For distributions with the grubby command this is done as root with
This mitigation comes courtesy of Red Hat. Our engineers keep you safe :)
277
69
280
@mgorny@social.treehouse.systems
·
May 02, 2026
Jesus Michał "Le Sigh" 🏔 (he)
@mgorny@social.treehouse.systems
A #cat (owned by 3 cats), a nonconformist. #Gentoo developer, est. 2010. Taking care of #Python, #LLVM, #Xfce. #FreeSoftware enthusiast. #CarFree → #rail around #Poznań and western #Poland. #MADAO. #AntiCapitalism. #ActuallyAutistic + #diabetes. Random rants, silly humor. Playing with tongue, and enjoying double entendres. Follows require approval because apparently AI-bros think not refusing a follow is consent. Note: if you can read Polish, I recommend following my Polish profile instead (link in table). It includes unique content that doesn't work in English, and I boost all English content there anyway. #TootFinder
social.treehouse.systems
Greg Kroah-Hartman: "If you look there are thousands of unfixed CVEs in the older LTS kernels right now, and if distros or users that rely on those older branches wish to see those resolved, they need to provide working backports to us to apply, as our first attempt did not work (which is why they are unfixed in those branches.)"
Really asking for a "Pray tell us", given that nobody actually bothered disclosing the problem to downstreams and that the commit message was hiding it.
Either way, apparently the great LLM-backed patch backporting process that #NVidia is so proud of doesn't really work. Upstream doesn't really care about #LTS branches, and they should be considered insecure by default.
https://lore.kernel.org/stable/2026050114-supernova-angler-2de1@gregkh/
#Gentoo #Linux #CopyFail #security
28
33
37
@gilles@toot.gagniard.org
·
May 01, 2026
Gilles Gagniard
@gilles@toot.gagniard.org
Software Engineer, (Retro)gamer, Dad, Prog/Rock/Metal lover. I post in English and in French.
toot.gagniard.org
@almalinux@fosstodon.org Test kernel installed on my servers and reboot done. No issue to report ! Thank you so much for your reactivity.
#copyfail #almaLinux
6
0
1
@the_moep@mastodon.de
·
May 01, 2026
Max Lee
@the_moep@mastodon.de
I like Llamas, Pizza and Electronic Music; Moep.tv founder; @minebench owner; Bukkit, Spigot & Paper contributor; Free Software Web and Java Developer; I do Minecraft stuff (@phoenix616) On the Fediverse since 2017. (@the_moep) All my typos are on purpose to identify me as non-AI, so don't boost if you can't handle edit notifications. #linux #selfhosting #freesoftware #opensource #java #gamedev #minecraft #llama [Avatar is a portrait of a white llama with an orange scarf looking straight into the camera in front of a rainbow gradient background]
mastodon.de
They: "On a scale from 1 to 10: How lazy are you?"
Me: Using the copy fail exploit instead of sudo to avoid having to type my password
#copyfail #linux #cybersecurity
324
8
185
@anthropy@mastodon.derg.nz
·
May 01, 2026
Anthropy
@anthropy@mastodon.derg.nz
"old school #hacker", owner of derg.nz and dragonhive.net. #IT person and #tech nerd of all kinds professionally; #carmodding and #hardware #tinkerer, #gardener, #developer, #cook, #writer, #biking, and a lot more things in spare time, when motivated. Feel free to ask me anything! Very likely to follow back if you are #furry or like tech stuff! exception of bots, crypto junk, etc NSFW account: https://mastodon.derg.nz/@AnthropyAD (CW: EXPLICIT/NSFW) Lore/SFW RP account: https://mastodon.derg.nz/@anthropylore
mastodon.derg.nz
Did you patch your servers against CopyFail yet? #CopyFail #CyberSecurity #Security #Linux
Of course!
62.5%
(20)
I like to live dangerously.
25.0%
(8)
Please send help
12.5%
(4)
32 votes
Poll closed
View on mastodon.derg.nz
1
3
4
@JennyFluff@chitter.xyz
·
Apr 30, 2026
JennyFluff 
💾
💾
@JennyFluff@chitter.xyz
pronouns: she/her or they/them I am a trans and enby cat that does IT projects for a living. I like to: - meow - boost art that has an image description - boost mutual aid posts (with CW: mutual aid) - archive old floppy disks (please send me floppies!) Feel free to follow, but absolutely no NFT people. #cat #meow #rust #art #artist #flop #MeCFS #soft #furry #trans #enby #klingon #retroComputing #softwareArchiving #floppy Short introduction (in Klingon): Jennifer 'oH pongwij'e' 'ej vIghro'oy jiH!
chitter.xyz
Note that if you the #copyfail exploit on your session, any terminal in it will be able to su without authentication (until next reboot I assume).
hotpatch:
https://lilting.ch/en/articles/linux-copy-fail-page-cache-root
1
2
1
@AthanSpod@social.linux.pizza
·
Apr 30, 2026
Athanasius
@AthanSpod@social.linux.pizza
Long-time Linux user (SLS something, using ~0.98 kernel back in 1993, Debian these days), occasional FOSS developer, gamer. Born in the 1970s. Pronouns: He/Him Previously on Mastodon: @AthanSpod
social.linux.pizza
@JennyFluff@chitter.xyz You can `echo 1 > /proc/sys/vm/drop_caches` to drop the caches, after you've done something like:
$ cd /etc/modprobe.d
$ cat > af_alg.conf
blacklist af_alg
blacklist algif_aead
$
which blacklists the modules. Now, if you have legitimate use of af_alg, you can decide to only `blacklist algif_aead`, which worked to block the exploit on my Debian 13/trixie desktop running a locally-compiled 6.18.25 kernel.
Dropping the caches clears what the exploit did (changing the contents of the cached version of `/usr/bin/su`, so that cached version is always used, not the on-disk version).
#copyfail
5
1
2
@Larvitz@burningboard.net
·
May 01, 2026
Larvitz 
@Larvitz@burningboard.net
IT Consultant from Germany, Linux enthusiast, BSD fanboy and firmly convinced that Ancient Domains of Mystery is the greatest video game of all time (and always will be). You'll find me here talking about Open Source, self-hosting, advanced networking (proud operator of AS201379), smart home shenanigans, and anything you can torment with a terminal. Cat pictures also welcome. Left, antifascist, vegan. The trifecta your uncle warned you about.
burningboard.net
Fresh gist: mitigating CVE-2026-31431 ("Copy Fail") on RHEL 8/9/10 with a tiny Ansible playbook.
It blacklists algif_aead via a kernel boot arg (initcall_blacklist=algif_aead_init), reboots only when needed, and asserts the mitigation actually stuck after reboot. Idempotent & safe to re-run.
https://codeberg.org/Larvitz/gists/src/branch/main/2026/20260501-CVE-2026-31431_RHEL_Mitigation.md
#Ansible #RHEL #Linux #InfoSec #SysAdmin #DevOps #CVE #CVE_2026_31431 #copyfail
27
2
22
@mttaggart@infosec.exchange
·
Apr 30, 2026
Taggart 
@mttaggart@infosec.exchange
Displaced Philly boy. Threat hunter. Educator. Executive Director. #infosec, #programming #rust 
, #python 
#haskell 
, and #javascript 
. #opensource advocate. General in the AI Resistance. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Not your bro. All opinions my own. Dad. #fedi22 #searchable Pronouns: He/him.
infosec.exchange
Got a very silly #CopyFail container escape working.
Basically, if the container can see a file shared by the host, regardless of permissions, CopyFail can write to it on the host.
https://discourse.ifin.network/t/copy-fail-732-bytes-to-root-on-every-major-linux-distributions/342/44
59
9
67
Docker Engine is safe against CVE-2026-31431 now.
Patch ASAP:
https://github.com/moby/moby/releases/tag/docker-v29.4.2
#docker #containers #linux #copyfail
1
0
3
@adhisimon@mastodon.kodesumber.com
·
May 01, 2026
Adhidarma Hadiwinoto 
@adhisimon@mastodon.kodesumber.com
Tukang gali terowongan virtual yang sok tau IT, networking, dan programming. Terobsesi sistem #distributed, #host2host, #decentralized. Bermimpi konten Internet kembali #federated. Tunnel digger who acting knows everything about IT, networking, and programing. Obsessed with distributed, host2host, and decentralized. Dreaming of internet content come-back to federated mode. I also available on #deltachat. #Coffee lover. Addicted to #wordle n #hardle #jakarta #indonesia #fedora
mastodon.kodesumber.com
Before trying to mitigate, it turns out my #fedora 43 workstation (not upgraded to 44 yet) had already updated and not vulnerable to #copyfail
1
2
0
@adhisimon@mastodon.kodesumber.com
·
May 01, 2026
Adhidarma Hadiwinoto
@adhisimon@mastodon.kodesumber.com
Tukang gali terowongan virtual yang sok tau IT, networking, dan programming. Terobsesi sistem #distributed, #host2host, #decentralized. Bermimpi konten Internet kembali #federated. Tunnel digger who acting knows everything about IT, networking, and programing. Obsessed with distributed, host2host, and decentralized. Dreaming of internet content come-back to federated mode. I also available on #deltachat. #Coffee lover. Addicted to #wordle n #hardle #jakarta #indonesia #fedora
mastodon.kodesumber.com
Fedora had released Fedora CoreOS 43.20260413.3.2 on "stable stream" few hours ago to patch against Copy Fail.
Upgraded packages:
kernel-6.19.11-200.fc43.x86_64 ⟶ 6.19.12-200.fc43.x86_64kernel-core-6.19.11-200.fc43.x86_64 ⟶ 6.19.12-200.fc43.x86_64kernel-modules-6.19.11-- 200.fc43.x86_64 ⟶ 6.19.12-200.fc43.x86_64kernel-modules-core-6.19.11-200.fc43.x86_64 ⟶ 6.19.12-200.fc43.x86_64
You can wait your zincati service schedule to upgrade automatically, or you can run sudo zincati-update-now to upgrade immediately.
#copyfail #fedora #fcos #coreos
1
0
0
@veronica@mastodon.online
·
Apr 30, 2026
Veronica Olsen
@veronica@mastodon.online
System Architect ★ Software Developer ★ High Energy Physics PhD at Uni Oslo & CERN ★ Linux ★ Python ★ Open Source ★ Unicode Unicorn ★ ISO 8601 Enthusiast ★ Consumer of Sci-Fi ★ Hobby Writer ★ Born at 336 ppm CO₂ ★ She/They Open Source: https://novelwriter.io & https://fosstodon.org/@novelwriter Banner image from Wallpaper Access.
mastodon.online
50
6
63