Content Warning

CONTENT WARNING

You may view NSFW content!

If you are under 18 years old you are not allowed to continue!

Lemmy.NRDBLG.de
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
HM King Charles III DG FD@feddit.uk to Selfhosted@lemmy.worldEnglish · 2 days ago

Serious Linux vulnerability affecting nearly every system. Patch your systems.

copy.fail

external-link
message-square
66
link
fedilink
  • cross-posted to:
  • selfhosted@lemmy.world
  • technology@lemmy.world
  • cybersecurity@sh.itjust.works
  • linux@programming.dev
  • cybersecurity@sh.itjust.works
312
external-link

Serious Linux vulnerability affecting nearly every system. Patch your systems.

copy.fail

HM King Charles III DG FD@feddit.uk to Selfhosted@lemmy.worldEnglish · 2 days ago
message-square
66
link
fedilink
  • cross-posted to:
  • selfhosted@lemmy.world
  • technology@lemmy.world
  • cybersecurity@sh.itjust.works
  • linux@programming.dev
  • cybersecurity@sh.itjust.works
Copy Fail — 732 Bytes to Root
copy.fail
external-link
CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.
  • Possibly linux@lemmy.zip
    link
    fedilink
    English
    arrow-up
    7
    ·
    1 day ago

    A local compromise happens more than you think

    • ipp0@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      1
      ·
      16 hours ago

      Do you have a source for how often it happens or is this conjecture? I guess this would most often happen through supply chain attacks or physical access, the first not being all that common in my understanding and the latter not being a typical threat model for a home computer. But if you have a source explaining what actually happens, I would love to read it.

      • Possibly linux@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        ·
        12 hours ago

        There are plenty of way to get a local unprivileged shell

        For instance, if you are running a old version of cups someone could chain together several vulnerabilities to gain root on your system

        https://www.bleepingcomputer.com/news/security/cups-flaws-enable-linux-remote-code-execution-but-theres-a-catch/

        Having a MAC like SELinux helps to mitigate this but you still should patch as soon as possible

Selfhosted@lemmy.world

selfhosted@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !selfhosted@lemmy.world

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.

Rules:

  1. Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

  • selfh.st Newsletter and index of selfhosted software and apps
  • awesome-selfhosted software
  • awesome-sysadmin resources
  • Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 866 users / day
  • 2.22K users / week
  • 2.88K users / month
  • 2.92K users / 6 months
  • 1 local subscriber
  • 58.9K subscribers
  • 177 Posts
  • 1.19K Comments
  • Modlog
  • mods:
  • Ruud@lemmy.world
  • Loki@lemmy.world
  • CannaVet@lemmy.world
  • devve@lemmy.world
  • HybridSarcasm@lemmy.world
  • BE: 0.19.17
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org