copyfail should work, right?
September 24, 2026 at 12:56 AM
copyfail should work, right?
The severity of the threat posed by CopyFail—and the likelihood of active exploitation—is high enough to warrant all Linux users to investigate their systems immediately.
The most severe Linux threat to surface in years catches the world flat-footed
CopyFail threatens multi-tenant servers, CI/CD work flows, Kubernetes containers, and more.
arstechnica.com
May 1, 2026 at 2:43 PM
The severity of the threat posed by CopyFail—and the likelihood of active exploitation—is high enough to warrant all Linux users to investigate their systems immediately.
U.S. cybersecurity agency CISA says the CopyFail bug is being actively used in hacking campaigns, and poses a major risk to servers and datacenters that rely on Linux.
U.S. government warns of severe CopyFail bug affecting major versions of Linux | TechCrunch
U.S. cybersecurity agency CISA says the CopyFail bug is being actively used in hacking campaigns, and poses a major risk to servers and datacenters that rely on Linux.
techcrunch.com
May 4, 2026 at 10:22 PM
U.S. cybersecurity agency CISA says the CopyFail bug is being actively used in hacking campaigns, and poses a major risk to servers and datacenters that rely on Linux.
Haha, ihr habt wohl gedacht es gibt heute keinen Wurstdonnerstag! Aber nein, es gab nur eine Verzögerung wegen Überstunden dank #copyfail.
April 30, 2026 at 8:03 PM
Haha, ihr habt wohl gedacht es gibt heute keinen Wurstdonnerstag! Aber nein, es gab nur eine Verzögerung wegen Überstunden dank #copyfail.
New update is out as of yesterday morning that patches the DirtyFrag exploit. This one is similar to CopyFail which we also patched a few days ago.
Stay safe out there. Remember these two if you ever wonder why we care so much about automatic updates!
Stay safe out there. Remember these two if you ever wonder why we care so much about automatic updates!
May 9, 2026 at 9:00 AM
New update is out as of yesterday morning that patches the DirtyFrag exploit. This one is similar to CopyFail which we also patched a few days ago.
Stay safe out there. Remember these two if you ever wonder why we care so much about automatic updates!
Stay safe out there. Remember these two if you ever wonder why we care so much about automatic updates!
most servers are vulnerable to copyfail and its awesome. free privesc every time
September 24, 2026 at 7:45 PM
most servers are vulnerable to copyfail and its awesome. free privesc every time
The exploit, dubbed CopyFail and tracked as CVE-2026-31431, allows hackers to take over PCs and data center servers. The Linux vulnerabilities have been patched—but many machines remain at risk. www.wired.com/story/danger...
Dangerous New Linux Exploit Gives Attackers Root Access to Countless Computers
The exploit, dubbed CopyFail and tracked as CVE-2026-31431, allows hackers to take over PCs and data center servers. The Linux vulnerabilities have been patched—but many machines remain at risk.
www.wired.com
May 1, 2026 at 8:33 PM
The exploit, dubbed CopyFail and tracked as CVE-2026-31431, allows hackers to take over PCs and data center servers. The Linux vulnerabilities have been patched—but many machines remain at risk. www.wired.com/story/danger...
Du coup on a rédigé ce blogpost pour que vous re-testiez sérieusement si votre mitigation passe: www.cwcloud.tech/blog/copyfail/
Et en français aussi: www.cwcloud.tech/fr/blog/copy...
Et en français aussi: www.cwcloud.tech/fr/blog/copy...
May 1, 2026 at 8:39 PM
Du coup on a rédigé ce blogpost pour que vous re-testiez sérieusement si votre mitigation passe: www.cwcloud.tech/blog/copyfail/
Et en français aussi: www.cwcloud.tech/fr/blog/copy...
Et en français aussi: www.cwcloud.tech/fr/blog/copy...
thanks, copyfail! now I can update my root password that I forgot on a server where I don't have GRUB access!
April 30, 2026 at 6:03 PM
thanks, copyfail! now I can update my root password that I forgot on a server where I don't have GRUB access!
Great, the age of AI assisted vulnerability discovery is fun. /sarcasm #CopyFail
CopyFail Compromises The Last 9 Years Of Linux Distros
YouTube video by Brodie Robertson
youtu.be
April 30, 2026 at 9:46 PM
Great, the age of AI assisted vulnerability discovery is fun. /sarcasm #CopyFail
May 7, 2026 at 10:56 PM
Comme cela vous avait plu pour CopyFail, voici une synthèse sur l'infection des paquets AUR sur #ArchLinux et en français !
Basé sur les informations très complètes de @thecybersecguru (dont le lien est en sources de l'article)
www.linuxtricks.fr/news/10-logi...
Basé sur les informations très complètes de @thecybersecguru (dont le lien est en sources de l'article)
www.linuxtricks.fr/news/10-logi...
June 15, 2026 at 1:37 PM
Comme cela vous avait plu pour CopyFail, voici une synthèse sur l'infection des paquets AUR sur #ArchLinux et en français !
Basé sur les informations très complètes de @thecybersecguru (dont le lien est en sources de l'article)
www.linuxtricks.fr/news/10-logi...
Basé sur les informations très complètes de @thecybersecguru (dont le lien est en sources de l'article)
www.linuxtricks.fr/news/10-logi...
Reminder that for every vulnerability like Copyfail there are probably 100 more undisclosed things in the wild. Security is an every day thing and not only once per big disclosure :)
May 2, 2026 at 3:26 PM
Reminder that for every vulnerability like Copyfail there are probably 100 more undisclosed things in the wild. Security is an every day thing and not only once per big disclosure :)
Attackers are cashing in on fresh 'CopyFail' Linux flaw
Attackers are cashing in on fresh 'CopyFail' Linux flaw
Researchers dropped a reliable root exploit and it didn’t sit idle for long
CISA is warning that a newly-disclosed Linux kernel bug dubbed "CopyFail" is already being exploited, just days after researchers dropped a working root-level exploit.…
go.theregister.com
May 7, 2026 at 11:07 PM
Attackers are cashing in on fresh 'CopyFail' Linux flaw
Linux kernel maintainers pitch emergency killswitch after CopyFail and Dirty Frag chaos
Linux kernel maintainers pitch emergency killswitch after CopyFail and Dirty Frag chaos
Instead of waiting for patch cycles, admins could simply shut down vulnerable functions before attackers get there
www.theregister.com
May 12, 2026 at 11:21 AM
Linux kernel maintainers pitch emergency killswitch after CopyFail and Dirty Frag chaos
Linux kernel maintainers pitch emergency killswitch after CopyFail and Dirty Frag chaos
Linux kernel maintainers pitch emergency killswitch after CopyFail and Dirty Frag chaos
Instead of waiting for patch cycles, admins could simply shut down vulnerable functions before attackers get there
www.theregister.com
May 13, 2026 at 7:22 PM
Linux kernel maintainers pitch emergency killswitch after CopyFail and Dirty Frag chaos
Got a very silly #CopyFail container escape working.
Basically, if the container can see a file shared by the host, regardless of permissions, CopyFail can write to it *on the host*.
Basically, if the container can see a file shared by the host, regardless of permissions, CopyFail can write to it *on the host*.
Copy Fail: 732 Bytes to Root on Every Major Linux Distributions
Okay I have one version of a container escape working. This relies on the fact that the page cache is shared between containers and host. There’s no isolation whatsoever. So if the container can see the file descriptor for a host file, copyfail works a treat. Let’s start with a simple C binary with nothing going on. It’s just a target. Now, we will mount that binary inside of an Alpine container in read only mode. Then after installing Python and a text editor, we modify the OG CopyFail...
discourse.ifin.network
April 30, 2026 at 10:08 PM
Got a very silly #CopyFail container escape working.
Basically, if the container can see a file shared by the host, regardless of permissions, CopyFail can write to it *on the host*.
Basically, if the container can see a file shared by the host, regardless of permissions, CopyFail can write to it *on the host*.
am i reading right that copyfail came out and nixOS was immune to it and then nixOS immediately got its own privilege escalation exploit cuz lol
May 6, 2026 at 10:29 AM
am i reading right that copyfail came out and nixOS was immune to it and then nixOS immediately got its own privilege escalation exploit cuz lol
The Linux kernel team is working on Killswitch, a new security feature that will temporarily disable some kernel functions until a patch is available
This is in response to the recent CopyFail and DirtyFrag disclosure debacles
lore.kernel.org/all/20260507...
This is in response to the recent CopyFail and DirtyFrag disclosure debacles
lore.kernel.org/all/20260507...
May 10, 2026 at 4:59 PM
The Linux kernel team is working on Killswitch, a new security feature that will temporarily disable some kernel functions until a patch is available
This is in response to the recent CopyFail and DirtyFrag disclosure debacles
lore.kernel.org/all/20260507...
This is in response to the recent CopyFail and DirtyFrag disclosure debacles
lore.kernel.org/all/20260507...
Linux kernel maintainers pitch emergency killswitch after CopyFail and Dirty Frag chaos
Linux kernel maintainers pitch emergency killswitch after CopyFail and Dirty Frag chaos
Instead of waiting for patch cycles, admins could simply shut down vulnerable functions before attackers get there
www.theregister.com
May 11, 2026 at 11:19 AM
Linux kernel maintainers pitch emergency killswitch after CopyFail and Dirty Frag chaos
'Dirty Frag' Linux flaw one-ups CopyFail with no patches and public root exploit
'Dirty Frag' Linux flaw one-ups CopyFail with no patches and public root exploit
Broken disclosure embargo left admins facing a fresh root-level flaw with no CVE
www.theregister.com
May 10, 2026 at 9:41 PM
'Dirty Frag' Linux flaw one-ups CopyFail with no patches and public root exploit
'Dirty Frag' Linux flaw one-ups CopyFail with no patches and public root exploit
'Dirty Frag' Linux flaw one-ups CopyFail with no patches and public root exploit
Broken disclosure embargo left admins facing a fresh root-level flaw with no CVE
www.theregister.com
May 8, 2026 at 1:38 PM
'Dirty Frag' Linux flaw one-ups CopyFail with no patches and public root exploit