Post · bonfire.cafe

Yeah I tested CopyFail. It's real. Yikes.

@mttaggart

A missing continue.

I am sure Lint or an AI woud have found this logic bug. /s

@mttaggart It also works on WSL.

Editing to add:

RHEL has now updated the severity and the fix is no longer "deferred" for all affected OSes.

Looks like it requires a local user account, with a password set, to exploit, yes?

@Emily That's correct. It's LPE.

@Emily Interestingly Fedora is patched as of 6.19.12.

@mttaggart Debian 13 still vulnerable with 6.12.74

@mttaggart Can't privesc me if I always run as root!