The same 732-byte Python script roots every Linux distribution shipped since 2017

copy.fail

cross-posted to:
selfhosted@lemmy.world
linux@lemmy.ml
selfhosted@lemmy.world
technology@lemmy.world
linux@lemmy.ml
hackernews@lemmy.bestiver.se

The same 732-byte Python script roots every Linux distribution shipped since 2017

copy.fail

not_IO@lemmy.blahaj.zone to

Linux@programming.devEnglish · 2 months ago

cross-posted to:
selfhosted@lemmy.world
linux@lemmy.ml
selfhosted@lemmy.world
technology@lemmy.world
linux@lemmy.ml
hackernews@lemmy.bestiver.se

Copy Fail — 732 Bytes to Root

copy.fail

CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.

woaw

also a good blog post about it https://xint.io/blog/copy-fail-linux-distributions

You must log in or register to comment.

Chat