#Linux got bitten by crypto-related page cache vulnerabilities in recent weeks. They had rather boring names: #CopyFail #DirtyFrag #Fragnesia
The #FreeBSD community is fixing this by naming their own bug of this class #BUMSRAKETE.
(Now, if you ran the name through a translator and are questioning its legitimacy: It's as real as the person that inspired the bug report's style, unfortunately.)
"[…] The "#CopyFail" vulnerability presented a unique challenge for us. Despite our practice of deploying #Linux patch updates every two weeks, we remained vulnerable because a month-old mainline fix had yet to be backported to our primary #kernel line. Despite that, we were still able to roll out patched kernels within hours of the backport's release. In the interim, #bpf-lsm provided a surgical, no-reboot mitigation that secured our fleet. […]"
https://blog.cloudflare.com/copy-fail-linux-vulnerability-mitigation/
When a critical Linux kernel privilege escalation was publicly disclosed, Cloudflare's security and engineering teams detected, investigated, and mitigated the threat across our global fleet, confirming zero customer impact and no malicious exploitation.
If you're still coping with #CopyFail... I feel you...
@flxtr @kubikpixel
Ich hielt die Frühpublikation bei #CopyFail besonders offensichtlich unverantwortlich ("major builds are out as of this writing" als noch keine draussen waren).
Und dachte, dass da möglicherweise der Drang zur Self-PR dahinter stecke.
https://dnip.ch/2026/05/05/dnip-briefing-70-mehr-weiter-teurer/#Linux-Sicherheitsluecke-est-2017
🚀 Big thanks to the team at Summit Embedded for showcasing how they use SmartGit to handle complex Git workflows!
In their latest article https://www.summitembedded.com/blog/smartgit, they demonstrate a real-world #Yocto development scenario— efficiently patching the recent "CopyFail" vulnerability using #SmartGit as their favorite #Git #GUI.
It's a great example of how SmartGit helps dev teams work faster, smarter & more reliably.
Download SmartGit for free → https://www.smartgit.dev/download/
Aktuelle Sicherheitslage - CopyFail und Co.
Aktuelle Sicherheitslücken wie: CopyFail, DirtyFrag, Fragnesia und ssh-keysign-pwn verunsichern Linux-Nutzer:innen. Dieser Artikel ordnet ein und gibt Entwarnung.
— von @ralfhersel im @gnulinux
🔐 https://gnulinux.ch/aktuelle-sicherheitslage
#linux #itsicherheit #copyfail #dirtyfrag #fragnesia #sshkeysignpwn #entwarnung #opensource #software #itsec
Updated info on fixes for #DirtyFrag and #Fragnesia at https://sketchesfromahomelab.com/articles/2026/05/14/Cavalcade_of_Copy_Fails/
- #Debian: Fragnesia FIXED
- #RHEL: Dirty Frag & Fragnesia FIXED
#copyfail #cve #cve_2026_43284 #cve_2026_43500 #cve_2026_46300 #dirtyfrag #fragnesia #linux #local_privilege_escalation #security
Achtung, heute mit -vvv! Neben unserem ersten Geburtstag wollen auch viele kritische CVEs besprochen werden. Vor allem #CopyFail, #DirtyFrag, #Fragnesia und ssh-keysign-pwn sorgten in den letzten Wochen für Ärger. Glücklicherweise gibt es mit #Ubuntu 26.04 und #Fedora 44 auch erfreuliche Neuerscheinungen. #Proxmox VE 9.2 und PBS 4.2 sind erschienen und auch von der #RedHatSummit gibt es einige Neuerungen.
data0
rvstaveren
Thorsten Leemhuis (acct. 1/4)
Pope Bob the Unsane
Marcel Waldvogel
Teddy / Domingo (🇨🇵/🇬🇧)
SmartGit
𝕂𝚞𝚋𝚒𝚔ℙ𝚒𝚡𝚎𝚕
[aj]
Urlaub im Userspace