Post #1896652

2026-04-30 11:23 UTC

Slightly annoyed at copy.fail releasing a PoC for an exploit still not patched in Ubuntu LTS so that they can advertise their AI thing

Replies (4)

@wren6991@types.pl 2026-04-30 12:13

Uhhhhh the kernel ignores modprobe blacklist for crypto modules. I blacklisted algif_aead and I can still pop a root shell: https://github.com/torvalds/linux/blob/e75a43c7cec459a07d91ed17de4de13ede2b7758/crypto/api.c#L301-L307

Open ##2080103
@Lunaphied@provably.online 2026-04-30 11:26

@wren6991 it's such shit, at least the Anthropic people decided to not just dump a bunch of public vulns of whatever quality out there to promote how cool their new model is and just focused on questionably true big numbers

Open ##2080104
@penguin42@mastodon.org.uk 2026-04-30 12:03

@wren6991 The timeline is a bit weird; it was patched in the mainline kernel ~1 month ago (quietly) and backports to 6.18ish came out fairly quickly but the backports for the older ones only turned up today upstream; I believe it was a bit tricky to backport.

Open ##2080105
@penguin42@mastodon.org.uk 2026-04-30 12:11

@never_released @wren6991 Except that's actually the kernel most of the distros base on; so shrug.

Open ##2080106