Post #2100400
2026-04-29 23:39 UTC
@marshray doesn't work on vaguely recent F44 kernel for me.
[adamw@omnibook ~]$ curl -o /tmp/test.py https://raw.githubusercontent.com/theori-io/copy-fail-CVE-2026-31431/refs/heads/main/copy_fail_exp.py
[adamw@omnibook ~]$ python3 /tmp/test.py
Password:
su: Authentication failure
[adamw@omnibook ~]$ uname -r
6.19.13-300.fc44.x86_64
Replies (1)
-
@marshray@infosec.exchange 2026-04-30 01:11
@adamw That's just a proof-of-concept exploit, not a reliable test. Your best bet is probably: grep AEAD /boot/config-$(uname -r) then look for '=m' or '=y' Then 'uname -a' and compare with the versions listed in the announcement: https://marc.info/?l=linux-cve-announce&m=177684846919195