Linux Mailing List

["Konrad Bucheli (PSI)" <konrad.bucheli AT psi.ch>]

Dear Linux Admins

The kernels with the copy.fail fix arrived. They can now be installed 
for RHEL9 with

    dnf clean all && dnf update -y kernel

or even better ;-)

    dnf clean all && dnf update -y

For RHEL8 we miss at the moment AFS drivers for the new kernel so we do 
not yet provide it.

Kind regards
Konrad

On 5/1/26 11:20, Bruhn, Basil Rafael wrote:
> Hello everyone
>
> For those who are not already aware, there is a logic flaw in the Linux 
> kernel code that allows any local user and users in containers to become 
> root. Affected are RedHat 8, 9 and 10. (Among other Linux Distros) 
> https://copy.fail/ <https://copy.fail/>
>
> Here you can find some documentation on how to mitigate the 
> vulnerability on your systems:
>
> https://linux.psi.ch/documentation/admin-guide/copyfail_mitigation/ 
> <https://linux.psi.ch/documentation/admin-guide/copyfail_mitigation/>
>
> We will announce as soon as RedHat shipped a new Kernel that includes a 
> patch to fix the vulnerability.
>
>
> Cheers,
>
> --
> *Basil Bruhn*
> Linux Engineer
> +41 56 310 27 03
> basil.bruhn AT psi.ch <mailto:basil.bruhn AT psi.ch>
> *Paul Scherrer Institut PSI*
> Center for Scientific Computing, Theory and Data
> Forschungsstrasse 111
> 5232 Villigen PSI, Schweiz
> https://psi.ch <https://psi.ch>

--
Paul Scherrer Institut
Konrad Bucheli
Linux Systems Engineer
Core Linux Research Services
Science IT Infrastructure and Services department (AWI)
OBBA/230
Forschungstrasse 111
5232 Villigen PSI
Switzerland

Phone: +41 56 310 27 24
konrad.bucheli AT psi.ch
www.psi.ch