Post #1806032
2026-04-30 11:42 UTC
I couldn't find a list of #Linux #kernel versions that include a patch for #copyfail, so I dug into the commit log and made one. Make sure you're using at least the following version of your branch to mitigate against copyfail:
- 7.0-rc7 (any stable 7.x is safe)
- 6.19.12
- 6.18.22
- 6.12.85
- 6.6.137
- 6.1.170
- 5.15.204
- 5.10.254
See https://copy.fail for more info about the #exploit.
#privilegeescalation #vulnerability #cryptography #linuxadmin #sysadmin
Replies (2)
-
@data0@indieweb.social 2026-04-30 11:57
(You should obviously not only update to these versions but to the latest stable one of the respective branch if possible)
-
@agowa338@chaos.social 2026-04-30 13:34
@data0@indieweb.social Or put a selinux rule in place to block AF_ALG system wide in casae you can't update.