#copyfail — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #copyfail, aggregated by home.social.
-
Working on Week 11 lab write up. Need to add all the citations and references to my #CopyFail presentation slides (when did bibtex become biber???? God, I'm old.)
Also finishing up the course reflection for this, my final #CyberSecurity course. Five courses, 20 credit hours of master's level graduate courses over about 15 months.
So, ofc, I'm going to start a practicum for Orten Gillingham #reading instruction from next week. OG+#EnglishLearners = great?
-
Working on Week 11 lab write up. Need to add all the citations and references to my #CopyFail presentation slides (when did bibtex become biber???? God, I'm old.)
Also finishing up the course reflection for this, my final #CyberSecurity course. Five courses, 20 credit hours of master's level graduate courses over about 15 months.
So, ofc, I'm going to start a practicum for Orten Gillingham #reading instruction from next week. OG+#EnglishLearners = great?
-
spent much of the day working on my #CyberSecurity presentation about #CopyFail #Linux #kernel vulnerability. About 20 slides; I have 7 minutes. No problem.
Tomorrow, I need to finish the other homework for the class.
-
spent much of the day working on my #CyberSecurity presentation about #CopyFail #Linux #kernel vulnerability. About 20 slides; I have 7 minutes. No problem.
Tomorrow, I need to finish the other homework for the class.
-
#Linux got bitten by crypto-related page cache vulnerabilities in recent weeks. They had rather boring names: #CopyFail #DirtyFrag #Fragnesia
The #FreeBSD community is fixing this by naming their own bug of this class #BUMSRAKETE.
(Now, if you ran the name through a translator and are questioning its legitimacy: It's as real as the person that inspired the bug report's style, unfortunately.)
-
#Linux got bitten by crypto-related page cache vulnerabilities in recent weeks. They had rather boring names: #CopyFail #DirtyFrag #Fragnesia
The #FreeBSD community is fixing this by naming their own bug of this class #BUMSRAKETE.
(Now, if you ran the name through a translator and are questioning its legitimacy: It's as real as the person that inspired the bug report's style, unfortunately.)
-
"[…] The "#CopyFail" vulnerability presented a unique challenge for us. Despite our practice of deploying #Linux patch updates every two weeks, we remained vulnerable because a month-old mainline fix had yet to be backported to our primary #kernel line. Despite that, we were still able to roll out patched kernels within hours of the backport's release. In the interim, #bpf-lsm provided a surgical, no-reboot mitigation that secured our fleet. […]"
https://blog.cloudflare.com/copy-fail-linux-vulnerability-mitigation/
-
"[…] The "#CopyFail" vulnerability presented a unique challenge for us. Despite our practice of deploying #Linux patch updates every two weeks, we remained vulnerable because a month-old mainline fix had yet to be backported to our primary #kernel line. Despite that, we were still able to roll out patched kernels within hours of the backport's release. In the interim, #bpf-lsm provided a surgical, no-reboot mitigation that secured our fleet. […]"
https://blog.cloudflare.com/copy-fail-linux-vulnerability-mitigation/
-
Aktuelle Sicherheitslage - CopyFail und Co.
Aktuelle Sicherheitslücken wie: CopyFail, DirtyFrag, Fragnesia und ssh-keysign-pwn verunsichern Linux-Nutzer:innen. Dieser Artikel ordnet ein und gibt Entwarnung.
— von @ralfhersel im @gnulinux🔐 https://gnulinux.ch/aktuelle-sicherheitslage
#linux #itsicherheit #copyfail #dirtyfrag #fragnesia #sshkeysignpwn #entwarnung #opensource #software #itsec
-
Aktuelle Sicherheitslage - CopyFail und Co.
Aktuelle Sicherheitslücken wie: CopyFail, DirtyFrag, Fragnesia und ssh-keysign-pwn verunsichern Linux-Nutzer:innen. Dieser Artikel ordnet ein und gibt Entwarnung.
— von @ralfhersel im @gnulinux🔐 https://gnulinux.ch/aktuelle-sicherheitslage
#linux #itsicherheit #copyfail #dirtyfrag #fragnesia #sshkeysignpwn #entwarnung #opensource #software #itsec
-
Updated info on fixes for #DirtyFrag and #Fragnesia at https://sketchesfromahomelab.com/articles/2026/05/14/Cavalcade_of_Copy_Fails/
- #Debian: Fragnesia FIXED
- #RHEL: Dirty Frag & Fragnesia FIXED#copyfail #cve #cve_2026_43284 #cve_2026_43500 #cve_2026_46300 #dirtyfrag #fragnesia #linux #local_privilege_escalation #security
-
Updated info on fixes for #DirtyFrag and #Fragnesia at https://sketchesfromahomelab.com/articles/2026/05/14/Cavalcade_of_Copy_Fails/
- #Debian: Fragnesia FIXED
- #RHEL: Dirty Frag & Fragnesia FIXED#copyfail #cve #cve_2026_43284 #cve_2026_43500 #cve_2026_46300 #dirtyfrag #fragnesia #linux #local_privilege_escalation #security
-
Docker Engine v29.4.3 mitigates the critical Copy Fail (CVE-2026-31431) vulnerability. Update immediately if you cannot patch your Linux kernel yet.
More details here: https://ostechnix.com/docker-copy-fail-mitigation/
-
Docker Engine v29.4.3 mitigates the critical Copy Fail (CVE-2026-31431) vulnerability. Update immediately if you cannot patch your Linux kernel yet.
More details here: https://ostechnix.com/docker-copy-fail-mitigation/
-
Если вы всё ещё беспокоитесь о [copy.fail](https://copy.fail/) в своих `kubernetes` кластерах - вот изи-фикс.
Маленький `DaemonSet`, грузит BPF-LSM хук на `socket_create` и режет любые попытки открыть `AF_ALG`. Без ребута, без пересборки ядра, без правки cmdline.
Работает на Talos Linux, где `rmmod` архитектурно недоступен (SELinux + lockdown + контроллер не умеет unload).Ставится одной командой:
`kubectl apply -f`
https://raw.githubusercontent.com/cozystack/copy-fail-blocker/main/manifests/copy-fail-blocker.yaml -
Mitigating CVE-2026-31431 (“Copy Fail”) in Docker Engine
#Docker #Engineering #AF_ALG #CopyFail #CVE202631431 #Dockerengine #Seccomp #Security #Selinuxhttps://www.docker.com/blog/mitigating-cve-2026-31431-copy-fail-in-docker-engine/
-
Mitigating CVE-2026-31431 (“Copy Fail”) in Docker Engine
#Docker #Engineering #AF_ALG #CopyFail #CVE202631431 #Dockerengine #Seccomp #Security #Selinuxhttps://www.docker.com/blog/mitigating-cve-2026-31431-copy-fail-in-docker-engine/
-
Aktuelle Sicherheitslage - CopyFail und Co.
Aktuelle Sicherheitslücken wie: CopyFail, DirtyFrag, Fragnesia und ssh-keysign-pwn verunsichern Linux-Nutzer:innen. Dieser Artikel ordnet ein und gibt Entwarnung.
-
Aktuelle Sicherheitslage - CopyFail und Co.
Aktuelle Sicherheitslücken wie: CopyFail, DirtyFrag, Fragnesia und ssh-keysign-pwn verunsichern Linux-Nutzer:innen. Dieser Artikel ordnet ein und gibt Entwarnung.
-
This Week in Security: AI Generated Reports, More AI Generated Reports, GitHub Chaos, and More Linux Vulnerabilities
-
This Week in Security: AI Generated Reports, More AI Generated Reports, GitHub Chaos, and More Linux Vulnerabilities
-
On Late Night Linux Episode 386, @joeress, @felimwhiteley, and @andybalaam discuss #CopyFail, #DirtyFrag, #Fragnesia and the proposed emergency killswitch in the kernel:
-
On Late Night Linux Episode 386, @joeress, @felimwhiteley, and @andybalaam discuss #CopyFail, #DirtyFrag, #Fragnesia and the proposed emergency killswitch in the kernel:
-
EVERYONE GETS AN LPE
Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270) -
EVERYONE GETS AN LPE
Windows:
#BlueHammer (#CVE_2026_33825)
#RedSun (#CVE_2026_41091)
#UnDefend (#CVE_2026_45498)
#WindowsInstaller (#CVE_2026_27910):Linux:
#CopyFail (#CVE_2026_31431)
#SSHKeysignPwn (#CVE_2026_46333)FreeBSD:
#FatGid (#CVE_2026_45250)
#ExecveBug (#CVE_2026_7270) -
Am i being wrong to think, that it's a GOOD usage of AI when serious issues in the Kernel like #dirtyfrag and #copyfail are found and released?
Of course they should not be used to cause harm, but imho this is a huge advantage of Open Source because the issues can be fixed quickly! -
According to Phoronix, Eric Biggers now has a commit to remove zero-copy support from AF_ALG, one of its riskiest aspects and one which enabled the #CopyFail exploit. This change could become a part of Linux 7.2:
https://www.phoronix.com/news/Linux-AF-ALF-Zero-Copy-Security
-
According to Phoronix, Eric Biggers now has a commit to remove zero-copy support from AF_ALG, one of its riskiest aspects and one which enabled the #CopyFail exploit. This change could become a part of Linux 7.2:
https://www.phoronix.com/news/Linux-AF-ALF-Zero-Copy-Security
-
With the rise of Linux vulnerabilities, Linux kernel developers are now considering a kill switch
https://www.linux-magazine.com/Online/News/Linux-kernel-Developers-Considering-a-Kill-Switch?utm_source=mlm
#Linux #kernel #KillSwitch #vulnerabilities #security #DirtyFrag #CopyFail -
With the rise of Linux vulnerabilities, Linux kernel developers are now considering a kill switch
https://www.linux-magazine.com/Online/News/Linux-kernel-Developers-Considering-a-Kill-Switch?utm_source=mlm
#Linux #kernel #KillSwitch #vulnerabilities #security #DirtyFrag #CopyFail -
We've also posted about our #CopyFail, #DirtyFrag, #Fragnesia handling on the #Gentoo website:
https://www.gentoo.org/news/2026/05/19/copy-fail-fragnesia-vulnerabilities.html
…and yes, another secfix round coming.
CC @wariat
-
We've also posted about our #CopyFail, #DirtyFrag, #Fragnesia handling on the #Gentoo website:
https://www.gentoo.org/news/2026/05/19/copy-fail-fragnesia-vulnerabilities.html
…and yes, another secfix round coming.
CC @wariat
-
Updated info on #Linux distro fixes for #DirtyFrag and #Fragnesia https://sketchesfromahomelab.com/articles/2026/05/14/Cavalcade_of_Copy_Fails/
- #AlmaLinux - #Fragnesia FIXED
- #Mageia - #DirtyFrag FIXED (thanks @maat !)
- Rocky - #Fragnesia FIXED
- SUSE - #Fragnesia FIXED for some products, others still pending#linux #security #copyfail #cve #cve_2026_43284 #cve_2026_43500 #cve_2026_46500 #dirtyfrag #fragnesia #copyfail2
-
Updated info on #Linux distro fixes for #DirtyFrag and #Fragnesia https://sketchesfromahomelab.com/articles/2026/05/14/Cavalcade_of_Copy_Fails/
- #AlmaLinux - #Fragnesia FIXED
- #Mageia - #DirtyFrag FIXED (thanks @maat !)
- Rocky - #Fragnesia FIXED
- SUSE - #Fragnesia FIXED for some products, others still pending#linux #security #copyfail #cve #cve_2026_43284 #cve_2026_43500 #cve_2026_46500 #dirtyfrag #fragnesia #copyfail2
-
Please read this important update from #CheckPoint:
Check Point Response to CVE-2026-31431 (Copy Fail), CVE-2026-43284, CVE-2026-43500 (Dirty Frag) and CVE-2026-46300 (Fragnesia)
-
Please read this important update from #CheckPoint:
Check Point Response to CVE-2026-31431 (Copy Fail), CVE-2026-43284, CVE-2026-43500 (Dirty Frag) and CVE-2026-46300 (Fragnesia)
-
The Register quoted Wiz putting it plainly: “The Linux networking stack is starting to look less like infrastructure and more like a root exploit vending machine.”
https://byteiota.com/fragnesia-cve-2026-46300-dirty-frag-patch-linux-root-exploit/
-
The Register quoted Wiz putting it plainly: “The Linux networking stack is starting to look less like infrastructure and more like a root exploit vending machine.”
https://byteiota.com/fragnesia-cve-2026-46300-dirty-frag-patch-linux-root-exploit/
