TheFloatingLab
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
HM King Charles III DG FD@feddit.uk to Selfhosted@lemmy.worldEnglish · 1 day ago

Serious Linux vulnerability affecting nearly every system. Patch your systems.

copy.fail

external-link
message-square
71
fedilink
  • cross-posted to:
  • selfhosted@lemmy.world
316
external-link

Serious Linux vulnerability affecting nearly every system. Patch your systems.

copy.fail

HM King Charles III DG FD@feddit.uk to Selfhosted@lemmy.worldEnglish · 1 day ago
message-square
71
fedilink
  • cross-posted to:
  • selfhosted@lemmy.world
Copy Fail — 732 Bytes to Root
copy.fail
external-link
CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.
  • Possibly linux@lemmy.zip
    link
    fedilink
    English
    arrow-up
    7
    ·
    22 hours ago

    A local compromise happens more than you think

    • ipp0@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      2
      ·
      6 hours ago

      Do you have a source for how often it happens or is this conjecture? I guess this would most often happen through supply chain attacks or physical access, the first not being all that common in my understanding and the latter not being a typical threat model for a home computer. But if you have a source explaining what actually happens, I would love to read it.

      • Possibly linux@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        3 hours ago

        There are plenty of way to get a local unprivileged shell

        For instance, if you are running a old version of cups someone could chain together several vulnerabilities to gain root on your system

        https://www.bleepingcomputer.com/news/security/cups-flaws-enable-linux-remote-code-execution-but-theres-a-catch/

        Having a MAC like SELinux helps to mitigate this but you still should patch as soon as possible

Selfhosted@lemmy.world

selfhosted@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !selfhosted@lemmy.world

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.

Rules:

  1. Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

  • selfh.st Newsletter and index of selfhosted software and apps
  • awesome-selfhosted software
  • awesome-sysadmin resources
  • Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 909 users / day
  • 2.47K users / week
  • 5.48K users / month
  • 15.3K users / 6 months
  • 1 local subscriber
  • 58.9K subscribers
  • 3.84K Posts
  • 86.4K Comments
  • Modlog
  • mods:
  • Ruud@lemmy.world
  • Loki@lemmy.world
  • CannaVet@lemmy.world
  • devve@lemmy.world
  • HybridSarcasm@lemmy.world
  • HybridSarcasm@lemmy.hybridsarcasm.xyz
  • BE: 0.19.5
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org