238
Copy Fail (CVE-2026-31431) is a trivially exploitable logic bug in Linux, reachable on all major distros released in the last 9 years. A small, portable python script gets root on all platforms. (copy.fail)
submitted 6 months ago by to c/linux@lemmy.ml
35 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 66 points 6 months ago (7 children)

It's a bit strange that this code requires a binary blob to verify, I think people who want to experiment with this should take some caution as it could be an exploit-in-an-exploit (user is highlighting a real exploit, but also trying to take advantage of people testing by effectively installing a back-door.) I won't say that's happening for sure, but take running this yourself with extreme caution.

  • permalink
  • fedilink
  • source
  • hideshow 7 child comments
    •
  • [–] 23 points 6 months ago (3 children)

    BLOB already includes "binary". That's what the first B is for.

    Sorry, couldn't stop myself.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 6 months ago*

    I had always heard "binary blob" said when it came to opaque code, but I see that blob is what is used to describe unexplained binary data as a whole in database lingo, so I'm willing to say your usage of it is probably more correct than mine here, assuming the binary data isn't an actual program (afaik there's no elf-file like characteristics but who knows.). 😇

  • permalink
  • fedilink
  • source
  • parent