Uploaded April 2026 | Updated September 2026, 3 weeks ago
Turns out that right under our noses for the past 9 years effecting every version of Linux kernel in that time was a trivial to execute privilege bug now dubbed CopyFail otherwise going by CVE-2026-31431
==========Support The Channel==========
► Patreon: https://brodierobertson.xyz/patreon
► Paypal: https://brodierobertson.xyz/paypal
► Liberapay: https://brodierobertson.xyz/liberapay
► Amazon USA: https://brodierobertson.xyz/amazonusa
==========Resources==========
Initial Writeup: https://copy.fail/
Better Writeup: xint.io/blog/copy-fail-linux-distributions
POC: github.com/theori-io/copy-fail-CVE-2026-31431/blob/main/copy_fail_exp.py
Kernel Patch: git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a664bf3d603d
The Cause: git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=72548b093ee3
Debian CVE: security-tracker.debian.org/tracker/CVE-2026-31431
Ubuntu CVE: ubuntu.com/security/CVE-2026-31431
SUSE CVE: suse.com/security/cve/CVE-2026-31431.html
Red Hat CVE: access.redhat.com/security/cve/cve-2026-31431
KDE Linux Disclosure: discuss.kde.org/t/kde-linux-images-202604210254-are-vulnerable-to-cve-2026-31431/46632
Github Notice: github.com/advisories/GHSA-2274-3hgr-wxv6
=========Video Platforms==========
🎥 React: youtube.com/@BrodieRobertsonReacts
🎥 Podcast: https://techovertea.xyz/youtube
🎮 Gaming: https://brodierobertson.xyz/gaming
==========Social Media==========
🎤 Discord: https://brodierobertson.xyz/discord
🐦 Twitter: https://brodierobertson.xyz/twitter
🌐 Mastodon: https://brodierobertson.xyz/mastodon
🖥️ GitHub: https://brodierobertson.xyz/github
==========Credits==========
🎨 Channel Art:
Profile Picture:
instagram.com/supercozman_draws
#Linux #LinuxNews #LinuxKernel #FOSS #CVE #OpenSource
🎵 Ending music
Track: Debris & Jonth - Game Time [NCS Release]
Music provided by NoCopyrightSounds.
Watch: youtube.com/watch?v=yDTvvOTie0w
Free Download / Stream: ncs.io/GameTime
DISCLOSURE: Wherever possible I use referral links, which means if you click one of the links in this video or description and make a purchase I may receive a small commission or other compensation.
Turns out that right under our noses for the past 9 years effecting every version of Linux kernel in that time was a trivial to execute privilege bug now dubbed CopyFail otherwise going by CVE-2026-31431
==========Support The Channel==========
► Patreon: https://brodierobertson.xyz/patreon
► Paypal: https://brodierobertson.xyz/paypal
► Liberapay: https://brodierobertson.xyz/liberapay
► Amazon USA: https://brodierobertson.xyz/amazonusa
==========Resources==========
Initial Writeup: https://copy.fail/
Better Writeup: xint.io/blog/copy-fail-linux-distributions
POC: github.com/theori-io/copy-fail-CVE-2026-31431/blob/main/copy_fail_exp.py
Kernel Patch: git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a664bf3d603d
The Cause: git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=72548b093ee3
Debian CVE: security-tracker.debian.org/tracker/CVE-2026-31431
Ubuntu CVE: ubuntu.com/security/CVE-2026-31431
SUSE CVE: suse.com/security/cve/CVE-2026-31431.html
Red Hat CVE: access.redhat.com/security/cve/cve-2026-31431
KDE Linux Disclosure: discuss.kde.org/t/kde-linux-images-202604210254-are-vulnerable-to-cve-2026-31431/46632
Github Notice: github.com/advisories/GHSA-2274-3hgr-wxv6
=========Video Platforms==========
🎥 React: youtube.com/@BrodieRobertsonReacts
🎥 Podcast: https://techovertea.xyz/youtube
🎮 Gaming: https://brodierobertson.xyz/gaming
==========Social Media==========
🎤 Discord: https://brodierobertson.xyz/discord
🐦 Twitter: https://brodierobertson.xyz/twitter
🌐 Mastodon: https://brodierobertson.xyz/mastodon
🖥️ GitHub: https://brodierobertson.xyz/github
==========Credits==========
🎨 Channel Art:
Profile Picture:
instagram.com/supercozman_draws
#Linux #LinuxNews #LinuxKernel #FOSS #CVE #OpenSource
🎵 Ending music
Track: Debris & Jonth - Game Time [NCS Release]
Music provided by NoCopyrightSounds.
Watch: youtube.com/watch?v=yDTvvOTie0w
Free Download / Stream: ncs.io/GameTime
DISCLOSURE: Wherever possible I use referral links, which means if you click one of the links in this video or description and make a purchase I may receive a small commission or other compensation.
