Post #1960044
2026-04-30 16:53 UTC
I've seen several people making that mistake now... do NOT test for copy.fail by looking at the loaded modules. Linux has a hotplug mechanism that will often load the module on demand. a reliable preliminary test is creating an AF_ALG socket of the required type:
python3 -c 'import socket; socket.socket(38,5,0).bind(("aead","authencesn(hmac(sha256),cbc(aes))"))'
if this fails, you're most likely not vulnerable
Replies (2)
-
@mildsunrise@tech.lgbt 2026-04-30 17:05
(if it succeeds without output, you are probably vulnerable if your kernel isn't patched)
-
@zvavybir@social.zvavybir.eu 2026-04-30 21:48
@mildsunrise@tech.lgbt > bash: python: command not found It failed, so I'm not vulnerable, right? /s