[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <adf629c9-12e4-4c70-8ace-37e46e8198b4@rs-labs.com>
Date: Thu, 30 Apr 2026 19:04:21 +0200
From: Roman Medina-Heigl Hernandez <roman@...labs.com>
To: oss-security@...ts.openwall.com
Subject: Re: CVE-2026-31431: CopyFail: linux local privilege
scalation
El 30/04/2026 a las 3:52, Solar Designer escribió:
> Another curious detail is the exploit needs Python newer than EL9
> installs by default, which might slow down some script kiddies a little
> bit. The above Python 3.11 worked (before the mitigation), but Rocky
> Linux 9.7's default install of 3.9 did not (has no os.splice).
Well, script kiddies can still build these exploits static-ELF and
upload to vulnerable boxes for an easy pwning:
https://github.com/tgies/copy-fail-c
https://github.com/badsectorlabs/copyfail-go
--
Saludos,
-Román
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
