linux-announce AT lists.psi.ch

Subject: Linux Mailing List

List archive

[[Linux-announce] ] copy.fail mitigation

From: "Bruhn, Basil Rafael" <basil.bruhn AT psi.ch>
To: "linux-announce AT lists.psi.ch" <linux-announce AT lists.psi.ch>
Subject: [[Linux-announce] ] copy.fail mitigation
Date: Fri, 1 May 2026 09:20:49 +0000
Accept-language: en-CH, en-GB, en-US
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=psi.ch; dmarc=pass action=none header.from=psi.ch; dkim=pass header.d=psi.ch; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Sz+A2O9IzG8oyrDgb+trOy3AOWHWaR7koaFwC8RUhwU=; b=hvYufltriIdvagoQIdR1KuFul6JRlWBRh1+2Z+JmX+y+Mqt3yRC1RroHHZ0riEWRCK/wKetvmDL79tGkZAhqQe8YgpZ9mgi4/9Iv8vWZDHHcPfynBqOqvPeU8kJmQw4n5VI1VK0JGaq7TeBRnEGYdNKEz6ghXL2SRbsPBQj1/pT5MjxvzpEysC/oNQOgpvbo+bt4nqlI5enBSMN3q6iiolBtbXRfMWVyOW3kFGgSfKsUQUUC+fXsInq9ree3XjmX4mx/LnNrr0GGNYL6ZjKgKeY/V6aishjNNtvX6hPsHvj5XyfIGQzNc+0kD3o0xpZJfxiKHkfU7stInzST9xLF/g==
Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Cmox94My2ESxHJ79kSq/dsR0UtdCpPcYKO6YVaG3ykOpehtGycizVKrs4dy35/tm9BEpIaqnMUCb9m1qqPcAz2EPNcSn40++WEZNosQPcGsnlDp9yaAQQmbkrDLsCZ17KRXMibH0ATURPv06ISnCg+MGafZ6ss9HI1hNYjzEdbR1YLShbRY/Bib9rRBIf6d4JH9xGLzJ9D3UaMJ79WB0mctidWAjWRJteek8XqYvswQv0W8etzJCkIX1GMxkLbdjtIXZNPMeVeiGWNfjMzSio14YryPd1ay5yGCDn+oJnKoHHB14EM6T8xDFoOeJKdbNh0Pkf0WPDweP/Esuh0PbEA==
Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=psi.ch;

Hello everyone

For those who are not already aware, there is a logic flaw in the Linux kernel code that allows any local user and users in containers to become root. Affected are RedHat 8, 9 and 10. (Among other Linux Distros) https://copy.fail/

Here you can find some documentation on how to mitigate the vulnerability on your systems:

https://linux.psi.ch/documentation/admin-guide/copyfail_mitigation/

We will announce as soon as RedHat shipped a new Kernel that includes a patch to fix the vulnerability.

Cheers,

Basil Bruhn

Linux Engineer

+41 56 310 27 03

basil.bruhn AT psi.ch

Paul Scherrer Institut PSI

Center for Scientific Computing, Theory and Data

Forschungsstrasse 111

5232 Villigen PSI, Schweiz

https://psi.ch

[[Linux-announce] ] copy.fail mitigation, Bruhn, Basil Rafael, 05/01/2026
- Re: [[Linux-announce] ] copy.fail mitigation, Konrad Bucheli (PSI), 05/05/2026
  - Re: [[Linux-announce] ] copy.fail mitigation, Konrad Bucheli (PSI), 05/06/2026