Beehaw
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
not_IO ( not_IO@lemmy.blahaj.zone )  to Linux@programming.devEnglish ·
edit-2
6 months ago

The same 732-byte Python script roots every Linux distribution shipped since 2017

copy.fail

external-link
message-square
18
link
fedilink
  • cross-posted to:
  • cybersecurity@infosec.pub
  • linux@lemmy.ml
  • security@lemmy.ml
  • blueteamsec@infosec.pub
  • linux@lemmy.ml
  • main@0xdd.org.ru
111
external-link

The same 732-byte Python script roots every Linux distribution shipped since 2017

copy.fail

not_IO ( not_IO@lemmy.blahaj.zone )  to Linux@programming.devEnglish ·
edit-2
6 months ago
message-square
18
link
fedilink
  • cross-posted to:
  • cybersecurity@infosec.pub
  • linux@lemmy.ml
  • security@lemmy.ml
  • blueteamsec@infosec.pub
  • linux@lemmy.ml
  • main@0xdd.org.ru
Copy Fail — 732 Bytes to Root
copy.fail
external-link
CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.

woaw

also a good blog post about it https://xint.io/blog/copy-fail-linux-distributions

  • Maki ( randamumaki@lemmy.blahaj.zone ) 
    link
    fedilink
    arrow-up
    5
    ·
    6 months ago

    I’m not as smart as the people who make alternative android options. I was just hoping it would help them jailbreak more of goggle’s bullshit so customers actually have a choice to go for an android OS which respects them and their privacy.

    • not_IO ( not_IO@lemmy.blahaj.zone ) OP
      link
      fedilink
      English
      arrow-up
      19
      ·
      6 months ago

      grapheneOS has already vented on social media that theu are not affected because of how they configured SELinux and that the headline is therefore not correct

      https://grapheneos.social/@GrapheneOS/116491317711428490

      • Scoopta ( Scoopta@programming.dev ) 
        link
        fedilink
        arrow-up
        14
        ·
        6 months ago

        SELinux breaks a lot of android root exploits, way back in the day even dirty cow didn’t work. It would get you “root” but not actually the full perms because of SELinux. Really good testament to the added security of MAC, it’s one of the reasons I run apparmor on my systems

        • village604 ( village604@adultswim.fan ) 
          link
          fedilink
          English
          arrow-up
          3
          ·
          6 months ago

          I’ll be happy if I never have to look at SELinux or fapolicy ever again. Especially fapolicy because the documentation is shit.

          It’s the one thing I don’t miss about being a sysadmin.

      • Lucy :3 ( 30p87@feddit.org ) 
        link
        fedilink
        arrow-up
        2
        ·
        6 months ago

        Aww dang it

        Well ok who tf cares I can literally just connect to adb over localhost with termux and do adb root

Linux@programming.dev

linux@programming.dev

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !linux@programming.dev

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

  • !linux_memes@programming.dev
  • !linuxphones@lemmy.ca
  • our Matrix group chat
  • !reactos@programming.dev

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 139 users / day
  • 1.39K users / week
  • 2.33K users / month
  • 5.76K users / 6 months
  • 126 local subscribers
  • 15.3K subscribers
  • 4.48K Posts
  • 23.7K Comments
  • Modlog
  • mods:
  • Ategon ( Ategon@programming.dev ) 
  • adr1an ( anzo@programming.dev ) 
  • dwraf_of_ignorance ( dwraf_of_ignorance@programming.dev ) 
  • BE: 0.19.15
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code