linux-announce AT lists.psi.ch

Subject: Linux Mailing List

List archive

Re: [[Linux-announce] ] copy.fail mitigation

From: "Konrad Bucheli (PSI)" <konrad.bucheli AT psi.ch>
To: linux-announce AT lists.psi.ch
Subject: Re: [[Linux-announce] ] copy.fail mitigation
Date: Wed, 6 May 2026 08:19:06 +0200
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=psi.ch; dmarc=pass action=none header.from=psi.ch; dkim=pass header.d=psi.ch; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=t625KdryU2xu3A8RMCX/pO+NiARVWnsPr3vno08hO9k=; b=GeLITKYe3HTijnlEhJsaWEtTzSe5nlAyY5Dgtz1hunZfeGBL19vR9tXG5IWXZr/mGHD2SeKFLcOWdjxKdc6UOKrubTBmULIS4ZFz0UjJ5d011MSkhM5oDVzM/i2qFooFh/WeoAu5u94A/drUEmTNMeR92CpASEwmT7vXCqYDM4kagj5M/Yv+hvvJ9m+YQMnH1NCouxQ5/hZuTZXHBKGj3Ucqi9eiR46lg5U6xyN5twZHfLnVujqtOHZrDjp9NBHaWbtwxclcRM3IBfpRr0JyDdVANSNxs5S1VNekyTGGPhQvl2Zxdj8npy1Ep757wViA7lBhMFhhlaHWOEqExd8EKQ==
Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=eSWf4biNvGgeX3kpJZ7hKYO582rMXDl1pVhU8Immb8zMxGV7muHKYOsuE3SOu/Jc7zlu3a1/9cXVqfuOwsHWlxqCNs0q7cNXReEJfApp7rvIgJePUtB6NgjKJbPmn2UL3E2HaNzqcsO3ADqL0/iySESwsLpObDudDrPxzMhM+Z5KFc98d1ZO+j9CGY2k3AAvbpJeG8NrGhpdu4oo3j8391NjTIHDOoj+1ougfC0ke18a+geL5aIYk6EZlFkXZjDQzfvgVjvO4kkbDLR2YMj492Njbm+RHxvkDu8OLRjoTlVDNJZmgRb/tTNW4hHyo/kdONFUL/LGeGEqFwE8pioptg==
Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=psi.ch;

Good morning

Now we also have the RHEL8 kernel without copy.fail vulnerability at start. Please update.

Kind regards
Konrad

On 5/5/26 14:50, Konrad Bucheli (PSI) wrote:

Dear Linux Admins

The kernels with the copy.fail fix arrived. They can now be installed for RHEL9 with

dnf clean all && dnf update -y kernel

or even better ;-)

dnf clean all && dnf update -y

For RHEL8 we miss at the moment AFS drivers for the new kernel so we do not yet provide it.

Kind regards
Konrad

On 5/1/26 11:20, Bruhn, Basil Rafael wrote:

Hello everyone

For those who are not already aware, there is a logic flaw in the Linux kernel code that allows any local user and users in containers to become root. Affected are RedHat 8, 9 and 10. (Among other Linux Distros) https://copy.fail/ <https://copy.fail/>

Here you can find some documentation on how to mitigate the vulnerability on your systems:

https://linux.psi.ch/documentation/admin-guide/copyfail_mitigation/ <https://linux.psi.ch/documentation/admin-guide/copyfail_mitigation/>

We will announce as soon as RedHat shipped a new Kernel that includes a patch to fix the vulnerability.

Cheers,

--
*Basil Bruhn*
Linux Engineer
+41 56 310 27 03
basil.bruhn AT psi.ch <mailto:basil.bruhn AT psi.ch>
*Paul Scherrer Institut PSI*
Center for Scientific Computing, Theory and Data
Forschungsstrasse 111
5232 Villigen PSI, Schweiz
https://psi.ch <https://psi.ch>

[[Linux-announce] ] copy.fail mitigation, Bruhn, Basil Rafael, 05/01/2026
- Re: [[Linux-announce] ] copy.fail mitigation, Konrad Bucheli (PSI), 05/05/2026
  - Re: [[Linux-announce] ] copy.fail mitigation, Konrad Bucheli (PSI), 05/06/2026