c/selfhosted · by cyrano@piefed.social · 120dCopy Fail – CVE-2026-31431 https://copy.fail/cross-posted from: https://lemmy.bestiver.se/post/1076650 Comments 47 points · 4 comments · view on lemmy.world
4 Comments
corsicanguppy@lemmy.ca · 4 pts · 120d
Do the sysctl fix and you're fine to wait for a patch.
cyrano@piefed.social · 1 pts · 120d
Tested on Ubuntu 24.04. Security patching from Ubuntu does fix it. Scary vulnerability
cmnybo@discuss.tchncs.de · 5 pts · 120d
It looks like the fix is just disabling the algif_aead kernel module. That prevented the proof of concept script from working on everything I tested it on. Hopefully they will get some kernel updates out soon.
TomAwezome@lemmy.world · 3 pts · 120d
They have shipped out an update mitigation for the issue. http://ubuntu.com/blog/copy-fail-vulnerability-fixes-available
sudo apt update && sudo apt upgradeand after that, also do the steps listed on that page for running
rmmodand grepping for the affected module unloaded