https://piefed.social/u/ezeno789

https://lemmy.dbzer0.com/u/ekZepp_db0

  • 62 Posts
  • 158 Comments
Joined 3 years ago
Cake day: June 26th, 2023
Fediverse@lemmy.worldbyekZepp@lemmy.world
2 months

Boy I was wrong about the Fediverse

matduggan.com English

It became the only reliable source of information I had. People posted links with a minimal amount of commentary, picking and choosing the best content from other social media networks. They’re not doing it to “build a brand” because that’s not a thing in the Fediverse. It’s too disjointed to be a place to build a newsletter subscription base.

19
    Linux@lemmy.mlbyekZepp@lemmy.world
    2 months

    UPDATE YOUR DISTRO - New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions

    thehackernews.com English

    cross-posted from: https://lemmy.world/post/46310739

    cross-posted from: https://lemmy.world/post/46310733

    Cybersecurity researchers have disclosed details of a Linux local privilege escalation (LPE) flaw that could allow an unprivileged local user to obtain root.

    The high-severity vulnerability tracked as CVE-2026-31431 (CVSS score: 7.8) has been codenamed Copy Fail by Xint.io and Theori.

    “An unprivileged local user can write four controlled bytes into the page cache of any readable file on a Linux system, and use that to gain root,” the vulnerability research team at Xint.io and Theori said.

    At its core, the vulnerability stems from a logic flaw in the Linux kernel’s cryptographic subsystem, specifically within the algif_aead module. The issue was introduced in a source code commit made in August 2017.

    Successful exploitation of the shortcoming could allow a simple 732-byte Python script to edit a setuid binary and obtain root on essentially all Linux distributions shipped since 2017, including Amazon Linux, RHEL, SUSE, and Ubuntu. The Python exploit involves four steps -

    • Open an AF_ALG socket and bind to authencesn(hmac(sha256),cbc(aes))
    • Construct the shellcode payload
    • Trigger the write operation to the kernel’s cached copy of “/usr/bin/su”
    • Call execve(“/usr/bin/su”) to load the injected shellcode and run it as root

    While the vulnerability is not remotely exploitable in isolation, a local unprivileged user can get root simply by corrupting the page cache of a setuid binary. The same primitive also has cross-container impacts as the page cache is shared across all processes on a system.

    8