Post #1842501
2026-04-30 14:23 UTC
Devastating privilege escalation on Linux: https://copy.fail/
Explanation: https://xint.io/blog/copy-fail-linux-distributions
Implementation in Go: https://github.com/badsectorlabs/copyfail-go
... and I learned today that there are AF_ALG socket types, to access cryptographic functions of the kernel.
#Linux #CVE-2026-31431 #crypto #AF_ALG
Replies (2)
-
@cryptax@mastodon.social 2026-04-30 14:34
BTW, don't run the exploit without understanding, in particular, you should **backup** your su. Something with cp -a su su.orig. You'll see the exploit is devastating, because it gets rid of the password protection, but you don't see anything on the disk : the binary looks the same, original size, original date.
-
@pancake@infosec.exchange 2026-04-30 15:40
@cryptax@mastodon.social linux is terribly complex, it supports so many absurd features, somehow im not surprised. But i just wished i had the bandwidth to switch to NetBSD someday