Post · bonfire.cafe

@mttaggart@infosec.exchange · 4 hours ago

RE: https://infosec.exchange/@ifin/116517567858100251

This incident is going to turn me into the Joker. Canonical has said nothing since Friday.

Is it May 4th or February 2nd? The Ubuntu DDoS is ongoing, with up-and-down status updates diverging from real, experienced outages. We're far from stable at this point.

https://discourse.ifin.network/t/ubuntu-services-under-attack/356/1

Fritz Adalis

@FritzAdalis@infosec.exchange · 2 hours ago

@mttaggart
> This incident is going to turn me into the Joker.
I'm tired of prerending you're not.

Taggart :ifin:

@mttaggart@infosec.exchange · 2 hours ago

@FritzAdalis When I enter my villain arc, you'll know

Heath Ledger Joker: This town deserves a better cl

da_667

@da_667@infosec.exchange · 2 hours ago

@mttaggart @FritzAdalis

Andres

@Andres4NY@social.ridetrans.it · 2 hours ago

@mttaggart It's affecting us upstream as well, though second-order effects!

One of the chromium co-maintainers would've already sent me patches that he needed to get 148 building on ubuntu jammy (which I'd then use for debian oldstable security updates). He can't do his usual builds, though, due to the DDoS.

Scott Wilson

@scottwilson@infosec.exchange · 3 hours ago

@mttaggart Is this helpful?

https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available

Ubuntu

Fixes available for CVE-2026-31431 (Copy Fail) Linux Kernel Local Privilege Escalation Vulnerability | Ubuntu

A local privilege escalation (LPE) vulnerability affecting the Linux kernel has been publicly disclosed on April 29, 2026. The vulnerability has been assigned CVE ID CVE-2026-31431 and is referred to as Copy Fail. The affected component is a kernel module that provides hardware-accelerated cryptographic functions: algif_aead. The vulnerab […]

Taggart :ifin:

@mttaggart@infosec.exchange · 3 hours ago

@scottwilson Thanks Scott! I am aware of the fix (And IFIN is tracking CopyFail in a different thread). But if Ubuntu's security repos are unavailable, not so much.

Nathaniel Mott

@nmott@infosec.exchange · 3 hours ago

@mttaggart in their defense, they had a lot of justifications for high school math grades to go through

Taggart :ifin:

@mttaggart@infosec.exchange · 3 hours ago

@nmott For a company full of Head Boys or whatever, they seem to be struggling with the concept of a WAF

Dan Sugalski

@wordshaper@weatherishappening.network · 4 hours ago

@mttaggart "DDoS the linux upgrade hosts so people can't patch an exploitable hole" is not a thing I had on my bingo card but in retrospect really should have.