@argv_minus_one@mastodon.sdf.org
Post #2429448
2026-04-30 04:21 UTC
@lispi314@udongein.xyz
Well, per the writeup, Copy Fail is the result of a silly optimization case. Linux certainly could adopt a policy of being more paranoid about isolating user-space data from memory belonging to other processes or the kernel, speed be damned. Don't need to hypervisor everything just to accomplish that.
Replies (1)
-
@lispi314@udongein.xyz 2026-04-30 04:29
@argv_minus_one@mastodon.sdf.org Yeah, it's in-place modification that isn't needed and has no tools helping it (the C type system is not great, but it's actually possible to twist it into representing that usefully anyway). Going by anecdotal comments on the Orange Site, that interface really didn't belong in the kernel to start with. The recommendation to just disable it entirely sounds quite sensible. Don't need to hypervisor everything just to accomplish that. It did however contain the bug for everyone using virtualization as the security boundary instead of the mass ambient-authority kernel.