Established 2026Monday, 20 July 2026
presents

The CloudySec Digest

“The wires, edited.”
← Front PageVulnerabilities Desk
Vulnerabilities

Copy.Fail Linux Vulnerability

Copy.Fail's kernel-level privilege escalation bypasses container isolation, requiring emergency patching across European cloud and edge computing infrastructure.

Summary written by editorial AI · Source link below

Filed by Schneier on Security1 min readRead at source ↗

This is the worst Linux vulnerability in years. TL;DR copy.fail is a Linux kernel local privilege escalation, not a browser or clipboard attack. Disclosed by Theori on 29 April 2026 with a working PoC. It abuses the kernel crypto API (AF_ALG sockets) plus splice() to write four bytes at a time straight into the page cache of a file the attacker does not own. The exploit works unmodified across Ubuntu, RHEL, Debian, SUSE, Amazon Linux, Fedora and most others. No race condition, no per-distro offs

Continue at the source
Read the full report at Schneier on Security

External link — opens at Schneier on Security in a new tab.

§
Continue with

More from the Vulnerabilities Desk