We dig into the Copy Fail vulnerability and test a proof-of-concept against our own box. Plus, Jon Seager, VP of Engineering at Canonical joins us, and we kick off the BSD Challenge!

All Jupiter Broadcasting Shows

Jupiter Broadcasting

Patch Me If You Can | LINUX Unplugged 665

MAY 3, 2026-1 MIN
All Jupiter Broadcasting Shows

Patch Me If You Can | LINUX Unplugged 665

MAY 3, 2026-1 MIN

Description

We dig into the Copy Fail vulnerability and test a proof-of-concept against our own box. Plus, Jon Seager, VP of Engineering at Canonical joins us, and we kick off the BSD Challenge!Sponsored By:Jupiter Party Annual Membership: Put your support on automatic with our annual plan, and get one month of membership for free!Managed Nebula: Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.Support LINUX UnpluggedLinks:πŸ’₯ Gets Sats Quick and Easy with StrikeπŸ“» LINUX Unplugged on Fountain.FMCopy Fail β€” CVE-2026-31431 β€” "An unprivileged local user can write four controlled bytes into the page cache of any readable file on a Linux system, and use that to gain root." β€” TheoriCopy Fail: 732 Bytes to Root - Xint β€” "A single 732-byte Python script can edit a setuid binary and obtain root on essentially all Linux distributions shipped since 2017." β€” XintLinux Kernel Bug Explained - Jorijn β€” "CopyFail is more portable. One script, every distro, no offsets. Dirty Pipe needed kernel β‰₯ 5.8; Copy Fail covers 2017–2026." β€” Jorijn"Kubernetes Pod Security Standards (Restricted) and default seccomp do NOT block the syscall used." β€” JorijnArs: Most Severe Linux Threat in Years β€” "The most severe Linux threat to surface in years catches the world flat-footed." β€” Ars TechnicaSysdig: CVE-2026-31431 Analysis β€” "The flaw was introduced in 2017 via commit 72548b093ee3, which switched AEAD operations to in-place processing." β€” SysdigCERT-EU AdvisoryUbuntu Security TrackerThe Register: Crypto FlawKernel Patch (reverts 2017 optimization) β€” "This mostly reverts commit 72548b093ee3 except for the copying of the associated data." β€” Kernel CommitBuggy Commit: 72548b093ee3 (2017)DeepWiki: AF_ALG Internalsoss-security DisclosurePSA + GRUB Mitigation - Jan WildeboerUbuntu 26.04 LTS (Resolute Raccoon) Released β€” "Ubuntu 26.04 LTS sets the example for providing best-in-class resilience while simultaneously embracing innovation and the advancement of open source." β€” Jon Seager, VP Ubuntu EngineeringThe Future of AI in Ubuntu - Jon Seager β€” "Throughout 2026 we'll be working on enabling access to frontier AI for Ubuntu users in a way that is deliberate, secure, and aligned with our open source values." β€” Jon SeagerUbuntu 26.04 Release NotesUbuntu AI Features Throughout 2026 - Phoronix β€” "Canonical's approach to AI is refreshingly thoughtful β€” Microsoft should take note." β€” ZDNetCanonical DDoS Attack Update β€” "Canonical's web infrastructure is under a sustained, cross-border attack and we are working to address it." β€” arcticp, CanonicalUbuntu Weekly Newsletter #942Canonical AI Approach - ZDNet9to5Linux: Opt-In LLM Toolsuutils/coreutils: Cross-platform Rust rewrite of the GNU coreutilsLINUX Unplugged 636: Engineering the FutureLiveCD fails to start X session on QEMU Β· Issue #354 Β· ghostbsd/issuesMonty's β€œrescue” drive NixOS configMagnolia Mayhem's BSD Challenge ReportPick: NASty β€” NASty is a NAS operating system built on NixOS and bcachefs. It turns commodity hardware into a storage appliance serving NFS, SMB, iSCSI, and NVMe-oF β€” managed from a single web UI, updated atomically, and rolled back when things go sideways.Pick: Defuse β€” Defuse is a GTK4 application for removing image backgrounds locally.Defuse on Flathub