1491 points•516 comments•2w ago•by unsnap_biceps•copy.fail ↗

Copy Fail

Security researchers disclosed Copy Fail, a local privilege escalation affecting Linux kernels dating back to 2017, tracked as CVE-2026-31431. A 732-byte Python script can exploit a straight-line flaw in the AF_ALG path to gain root via the page cache, with a public PoC and demonstrations across multiple distributions. Mitigations include updating to kernels that revert the 2017 AF_ALG optimization (commit a664bf3d603d) or disabling algif_aead, with patches already rolling out on major distros.

Discussion (516)

No comments yet

Top
Trending
New
For You
Bookmarks
Dossier