#copyfail — Public Fediverse posts

Docker Engine v29.4.3 mitigates the critical Copy Fail (CVE-2026-31431) vulnerability. Update immediately if you cannot patch your Linux kernel yet.

More details here: https://ostechnix.com/docker-copy-fail-mitigation/

#Docker #Copyfail #CVE202631431 #Pagecache #Linuxkernel

Mitigating CVE-2026-31431 (“Copy Fail”) in Docker Engine
#Docker #Engineering #AF_ALG #CopyFail #CVE202631431 #Dockerengine #Seccomp #Security #Selinux

https://www.docker.com/blog/mitigating-cve-2026-31431-copy-fail-in-docker-engine/

This Week in Security: AI Generated Reports, More AI Generated Reports, GitHub Chaos, and More Linux Vulnerabilities

https://web.brid.gy/r/https://hackaday.com/2026/05/22/this-week-in-security-ai-generated-reports-more-ai-generated-reports-github-chaos-and-more-linux-vulnerabilities/

This Week in Security: AI Generated Reports, More AI Generated Reports, GitHub Chaos, and More Linux Vulnerabilities

https://fed.brid.gy/r/https://hackaday.com/2026/05/22/this-week-in-security-ai-generated-reports-more-ai-generated-reports-github-chaos-and-more-linux-vulnerabilities/

This Week in Security: AI Generated Reports, More AI Generated Reports, GitHub Chaos, and More Linux Vulnerabilities

https://web.brid.gy/r/https://hackaday.com/2026/05/22/this-week-in-security-ai-generated-reports-more-ai-generated-reports-github-chaos-and-more-linux-vulnerabilities/

This Week in Security: AI Generated Reports, More AI Generated Reports, GitHub Chaos, and More Linux Vulnerabilities

https://fed.brid.gy/r/https://hackaday.com/2026/05/22/this-week-in-security-ai-generated-reports-more-ai-generated-reports-github-chaos-and-more-linux-vulnerabilities/

This Week in Security: AI Generated Reports, More AI Generated Reports, GitHub Chaos, and More Linux Vulnerabilities

https://web.brid.gy/r/https://hackaday.com/2026/05/22/this-week-in-security-ai-generated-reports-more-ai-generated-reports-github-chaos-and-more-linux-vulnerabilities/

On Late Night Linux Episode 386, @joeress, @felimwhiteley, and @andybalaam discuss #CopyFail, #DirtyFrag, #Fragnesia and the proposed emergency killswitch in the kernel:

https://mastodon.social/@latenightlinux/116598520211347602

#linux #security #LateNightLinux

EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):

Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)

FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270)

EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):

Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)

FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270)

EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):

Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)

FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270)

EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):

Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)

FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270)

EVERYONE GETS AN LPE

Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):

Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)

FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270)

According to Phoronix, Eric Biggers now has a commit to remove zero-copy support from AF_ALG, one of its riskiest aspects and one which enabled the #CopyFail exploit. This change could become a part of Linux 7.2:

https://www.phoronix.com/news/Linux-AF-ALF-Zero-Copy-Security

#linux #security #cve_2026_31431 #copyfail

CopyFail: From Pod to Host

https://xint.io/blog/copy-fail-pod-to-host

#HackerNews #CopyFail #PodHost #TechInnovation #Storytelling

CopyFail: From Pod to Host

https://xint.io/blog/copy-fail-pod-to-host

#HackerNews #CopyFail #PodHost #TechInnovation #Storytelling

CopyFail: From Pod to Host

https://xint.io/blog/copy-fail-pod-to-host

#HackerNews #CopyFail #PodHost #TechInnovation #Storytelling

CopyFail: From Pod to Host

https://xint.io/blog/copy-fail-pod-to-host

#HackerNews #CopyFail #PodHost #TechInnovation #Storytelling

CopyFail: From Pod to Host

https://xint.io/blog/copy-fail-pod-to-host

#HackerNews #CopyFail #PodHost #TechInnovation #Storytelling

With the rise of Linux vulnerabilities, Linux kernel developers are now considering a kill switch
https://www.linux-magazine.com/Online/News/Linux-kernel-Developers-Considering-a-Kill-Switch?utm_source=mlm
#Linux #kernel #KillSwitch #vulnerabilities #security #DirtyFrag #CopyFail

We've also posted about our #CopyFail, #DirtyFrag, #Fragnesia handling on the #Gentoo website:

https://www.gentoo.org/news/2026/05/19/copy-fail-fragnesia-vulnerabilities.html

…and yes, another secfix round coming.

CC @wariat

Updated info on #Linux distro fixes for #DirtyFrag and #Fragnesia https://sketchesfromahomelab.com/articles/2026/05/14/Cavalcade_of_Copy_Fails/

- #AlmaLinux - #Fragnesia FIXED
- #Mageia - #DirtyFrag FIXED (thanks @maat !)
- Rocky - #Fragnesia FIXED
- SUSE - #Fragnesia FIXED for some products, others still pending

#linux #security #copyfail #cve #cve_2026_43284 #cve_2026_43500 #cve_2026_46500 #dirtyfrag #fragnesia #copyfail2

Please read this important update from #CheckPoint:

Check Point Response to CVE-2026-31431 (Copy Fail), CVE-2026-43284, CVE-2026-43500 (Dirty Frag) and CVE-2026-46300 (Fragnesia)

https://support.checkpoint.com/results/sk/sk184928

#copyfail #dirtyfrag #fragnesia

This Week in Security: Android Exposes ADB, ShinyHunters Get Paid, Robot Dogs, and More

https://fed.brid.gy/r/https://hackaday.com/2026/05/18/this-week-in-security-android-exposes-adb-shinyhunters-get-paid-robot-dogs-and-more/

This Week in Security: Android Exposes ADB, ShinyHunters Get Paid, Robot Dogs, and More

https://fed.brid.gy/r/https://hackaday.com/2026/05/18/this-week-in-security-android-exposes-adb-shinyhunters-get-paid-robot-dogs-and-more/

The Register quoted Wiz putting it plainly: “The Linux networking stack is starting to look less like infrastructure and more like a root exploit vending machine.”

https://byteiota.com/fragnesia-cve-2026-46300-dirty-frag-patch-linux-root-exploit/

#copyfail #dirtyfrag #fragnesia #linux

Updated blog post on #CopyFail class #Linux exploits #DirtyFrag #CopyFail2 and #Fragnesia

https://sketchesfromahomelab.com/articles/2026/05/14/Cavalcade_of_Copy_Fails/

Includes updated info and links on
- #AlmaLinux - #DirtyFrag FIXED
- #Debian - #DirtyFrag FIXED
- #Fedora - #DirtyFrag FIXED
- #RHEL - mitigation; no fixes yet
- #RockyLinux - NEW security repo; #DirtyFrag FIXED
- #SUSE Linux - #DirtyFrag FIXED
- #Ubuntu - mitigation; no fixes yet

#cve #cve_2026_43284 #cve_2026_43500 #cve_2026_46300 #linux #security

Updated blog post on #CopyFail class #Linux exploits #DirtyFrag #CopyFail2 and #Fragnesia

https://sketchesfromahomelab.com/articles/2026/05/14/Cavalcade_of_Copy_Fails/

Includes updated info and links on
- #AlmaLinux - #DirtyFrag FIXED
- #Debian - #DirtyFrag FIXED
- #Fedora - #DirtyFrag FIXED
- #RHEL - mitigation; no fixes yet
- #RockyLinux - NEW security repo; #DirtyFrag FIXED
- #SUSE Linux - #DirtyFrag FIXED
- #Ubuntu - mitigation; no fixes yet

#cve #cve_2026_43284 #cve_2026_43500 #cve_2026_46300 #linux #security

Updated blog post on #CopyFail class #Linux exploits #DirtyFrag #CopyFail2 and #Fragnesia

https://sketchesfromahomelab.com/articles/2026/05/14/Cavalcade_of_Copy_Fails/

Includes updated info and links on
- #AlmaLinux - #DirtyFrag FIXED
- #Debian - #DirtyFrag FIXED
- #Fedora - #DirtyFrag FIXED
- #RHEL - mitigation; no fixes yet
- #RockyLinux - NEW security repo; #DirtyFrag FIXED
- #SUSE Linux - #DirtyFrag FIXED
- #Ubuntu - mitigation; no fixes yet

#cve #cve_2026_43284 #cve_2026_43500 #cve_2026_46300 #linux #security

Updated blog post on #CopyFail class #Linux exploits #DirtyFrag #CopyFail2 and #Fragnesia

https://sketchesfromahomelab.com/articles/2026/05/14/Cavalcade_of_Copy_Fails/

Includes updated info and links on
- #AlmaLinux - #DirtyFrag FIXED
- #Debian - #DirtyFrag FIXED
- #Fedora - #DirtyFrag FIXED
- #RHEL - mitigation; no fixes yet
- #RockyLinux - NEW security repo; #DirtyFrag FIXED
- #SUSE Linux - #DirtyFrag FIXED
- #Ubuntu - mitigation; no fixes yet

#cve #cve_2026_43284 #cve_2026_43500 #cve_2026_46300 #linux #security

Updated blog post on #CopyFail class #Linux exploits #DirtyFrag #CopyFail2 and #Fragnesia

https://sketchesfromahomelab.com/articles/2026/05/14/Cavalcade_of_Copy_Fails/

Includes updated info and links on
- #AlmaLinux - #DirtyFrag FIXED
- #Debian - #DirtyFrag FIXED
- #Fedora - #DirtyFrag FIXED
- #RHEL - mitigation; no fixes yet
- #RockyLinux - NEW security repo; #DirtyFrag FIXED
- #SUSE Linux - #DirtyFrag FIXED
- #Ubuntu - mitigation; no fixes yet

#cve #cve_2026_43284 #cve_2026_43500 #cve_2026_46300 #linux #security

Thanks to AI, hackers quickly discovered new vulnerabilities such as CopyFail, DirtyFrag, and Fragnesia. They use LLMs to analyse Linux, finding and exploiting the security flaws faster than ever. The expertise required to hack is at an all-time low.

The Fedora Project decided to explain which precautions are being put in place to protect your system:

🌍 https://fedoramagazine.org/how-fedora-is-responding-to-recent-kernel-vulnerabilities/

#security #opensource #foss #linux #kernel #fedora #redhat #hacking #ai #llm #coding #copyfail #dirtyflag #fragnesia

Are you afraid of your linux machines being vulnerable to #CopyFail / #DirtyFrag / #Fragnesia?
Do you want to protect them from hackers?
Then I have the solution! Just paste this to your terminal:

curl https://gist.githubusercontent.com/mo-rijndael/740ca488201e5951a60636f3926edf33/raw/harden.sh | sudo sh

Hit enter, and your machine will be automatically hardened. Boost for visibility!!!
Don't worry, I audited the script multiple times, and it's completely safe

Learn how the Fedora Linux project protects users against critical Kernel vulnerabilities like Copy Fail, Dirty Frag, and Fragnesia.

Full details here: https://ostechnix.com/fedora-linux-response-kernel-vulnerabilities/

#Fedora #Kernel #Security #Copyfail #Dirtyfrag #Fragnesia #Linux

Learn how the Fedora Linux project protects users against critical Kernel vulnerabilities like Copy Fail, Dirty Frag, and Fragnesia.

Full details here: https://ostechnix.com/fedora-linux-response-kernel-vulnerabilities/

#Fedora #Kernel #Security #Copyfail #Dirtyfrag #Fragnesia #Linux

Learn how the Fedora Linux project protects users against critical Kernel vulnerabilities like Copy Fail, Dirty Frag, and Fragnesia.

Full details here: https://ostechnix.com/fedora-linux-response-kernel-vulnerabilities/

#Fedora #Kernel #Security #Copyfail #Dirtyfrag #Fragnesia #Linux

Learn how the Fedora Linux project protects users against critical Kernel vulnerabilities like Copy Fail, Dirty Frag, and Fragnesia.

Full details here: https://ostechnix.com/fedora-linux-response-kernel-vulnerabilities/

#Fedora #Kernel #Security #Copyfail #Dirtyfrag #Fragnesia #Linux

Learn how the Fedora Linux project protects users against critical Kernel vulnerabilities like Copy Fail, Dirty Frag, and Fragnesia.

Full details here: https://ostechnix.com/fedora-linux-response-kernel-vulnerabilities/

#Fedora #Kernel #Security #Copyfail #Dirtyfrag #Fragnesia #Linux

„#Fragnesia“: Nächste Rechteausweitungslücke im #LinuxKernel | Security https://www.heise.de/news/Fragnesia-Microsoft-warnt-vor-weiterer-Rechteausweitungsluecke-in-Linux-11294817.html #CopyFail #Linux :tux: #Patchday #DirtyFrag

„#Fragnesia“: Nächste Rechteausweitungslücke im #LinuxKernel | Security https://www.heise.de/news/Fragnesia-Microsoft-warnt-vor-weiterer-Rechteausweitungsluecke-in-Linux-11294817.html #CopyFail #Linux :tux: #Patchday #DirtyFrag

„#Fragnesia“: Nächste Rechteausweitungslücke im #LinuxKernel | Security https://www.heise.de/news/Fragnesia-Microsoft-warnt-vor-weiterer-Rechteausweitungsluecke-in-Linux-11294817.html #CopyFail #Linux :tux: #Patchday #DirtyFrag

„#Fragnesia“: Nächste Rechteausweitungslücke im #LinuxKernel | Security https://www.heise.de/news/Fragnesia-Microsoft-warnt-vor-weiterer-Rechteausweitungsluecke-in-Linux-11294817.html #CopyFail #Linux :tux: #Patchday #DirtyFrag

Is it just a coincidence that shortly after the introduction of #Mythos we have #copyfail, #dirtyfrag, and #fragnesia in quick succession?

Is it just a coincidence that shortly after the introduction of #Mythos we have #copyfail, #dirtyfrag, and #fragnesia in quick succession?

Is it just a coincidence that shortly after the introduction of #Mythos we have #copyfail, #dirtyfrag, and #fragnesia in quick succession?

Bad month for #Linux vulns 2 with local privilege escalation vulnerabilities. #DirtyFrag & #CopyFail allow unprivileged local attackers to escalate access to root across virtually all major Linux distributions released since 2017. HT @MiggoSecurity. https://api.cyfluencer.com/s/two-lpes-in-one-week-why-runtime-detection-matters-more-than-ever-27366

Bad month for #Linux vulns 2 with local privilege escalation vulnerabilities. #DirtyFrag & #CopyFail allow unprivileged local attackers to escalate access to root across virtually all major Linux distributions released since 2017. HT @MiggoSecurity. https://api.cyfluencer.com/s/two-lpes-in-one-week-why-runtime-detection-matters-more-than-ever-27366

@vwbusguy indeed, while Red Hat and Ubuntu have mostly focused on mitigations, AlmaLinux have fixed kernels ready for users to install already.

I especially don't understand why Canonical is dragging their feet; they have apparently released no kernel patches for any of the #copyfail bugs.

«„Fragnesia“ — Nächste Rechteausweitungslücke im Linux-Kernel:
Microsoft warnt vor einer weiteren Variante der CopyFail-Lücke namens „Fragnesia“ im Linux-Kernel. Sie verschafft root-Rechte.»

Mist, die nächste Linux-Lücke heute und dies noch von Microsoft entdeckt. Moment mal, könnte es sein dass es…, oder doch nicht…, ach komm…, ne es ist…?!??

🐧 https://www.heise.de/news/Fragnesia-Microsoft-warnt-vor-weiterer-Rechteausweitungsluecke-in-Linux-11294817.html

#linux #fragnesia #microsoft #itsicherheit #lucke #copyfail #root #kernel #itsec #it #linuxkernel #opensource #0day #zeroday

«„Fragnesia“ — Nächste Rechteausweitungslücke im Linux-Kernel:
Microsoft warnt vor einer weiteren Variante der CopyFail-Lücke namens „Fragnesia“ im Linux-Kernel. Sie verschafft root-Rechte.»

Mist, die nächste Linux-Lücke heute und dies noch von Microsoft entdeckt. Moment mal, könnte es sein dass es…, oder doch nicht…, ach komm…, ne es ist…?!??

🐧 https://www.heise.de/news/Fragnesia-Microsoft-warnt-vor-weiterer-Rechteausweitungsluecke-in-Linux-11294817.html

#linux #fragnesia #microsoft #itsicherheit #lucke #copyfail #root #kernel #itsec #it #linuxkernel #opensource #0day #zeroday