Post #2198383
2026-05-05 14:11 UTC
Did anyone write a copy.fail exploit yet that does the equivalent of initcall_blacklist=algif_aead_init so that it disabled itself on the running kernel? For those of us with large scale amount of running kernels that take time to replace :)
Replies (1)
-
@neverpanic@chaos.social 2026-05-05 17:40
@letoams@defcon.social No, but there are mitigations using eBPF that don't require rebooting, e.g. https://github.com/atgreen/block-copyfail.