Copy Fail not fixed in 6.17

[vonwallace]

The Copy Fail vulnerability (CVE-2026-31431) is fixed in the following Linux kernel versions:

7.0
6.19.12
6.18.22
6.12.85
6.6.137
6.1.170
5.15.204
5.10.254

[Forpli]

Take a look here:

CVE-2026-31431 (Copy Fail) Patch Status for Zorin OS 18.1

Hello community, I have Zorin OS 18.1 (kernel 6.17) and I'm concerned about the recent Copy Fail (CVE-2026-31431) Linux kernel vulnerability that allows local privilege escalation to root. Questions: Is a official patch/kernel update being worked on for Zorin OS 18.1? When can we expect the patch release (Linux 6.18.22+ or backport)? Are there currently available HWE kernels with the fix in Zorin repositories? For now, I've temporarily blacklisted the algif_aead module, but I'm waiting for…

[Ponce-De-Leon]

Ubuntu goes the Way with disabling the Module. An Update is theoretically available but because of the current Server Issues difficult to get. I had the Luck to already get it. Look here:

CVE-2026-31431 (Copy Fail) Patch Status for Zorin OS 18.1

UPDATE: I got today an Update over the Software Updater. Besides Kernel Updates came an Update for kmod/libkmod which is related to this Security Vulnerability. So, there doesn't come a Kernel Patch to say that clear. The Update makes that what the Explorer of the Security Issue already delivered: It disables the problematic Module. When updated, You can check that in the Directory /etc/modprobe.d/ that there is a File called disable-algif_aead.conf Here some Pictures to show it: [Bildschir…

You could manually create the File what is neccessary. Might not be the best Method but at least, You would have it.

[sglbl]

Take a look at:

About Linux Sudo Access Exploit

3 days ago a new exploit was shared by copy.fail that effects all the linux distros after 2017. [image] This script makes sudo command or knowing the password unnecessary by manipulating kernel socket. Source code (732 byte python script, it requires only an unprivileged local user account and standard library, no network access, no kernel debugging features, not even pre-installed primitives.): I tested it with the command shown on my Linux 6.17.0-22 and it directly elevated to sudo acces…

[Ponce-De-Leon]

I forgot something: You could disable the Launchpad Sources, then update the System and then enable them again. Could work to get the Update, too.