Debian's patched 6.12.85+deb13-amd64 #1 SMP PREEMPT_DYNAMIC seems GTG with the PoC published here:
https://github.com/theori-io/copy-fail-CVE-2026-31431/blob/main/copy_fail_exp.py
```
root@cake:~# su - eat
eat@cake:~$ vim foo.py
eat@cake:~$ cat foo.py | python3 && su
Password: su: Authentication failure
Password:
```
Bit worried about where Ubuntu is at. Ominously, their own fix announcement page seems down:
https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available
Julian Oliver
npub1rc…8nu7f
2026-05-01 06:23:38 UTC
in reply to nevent1q…ax2w
Author Public Key
npub1rc8yx99dyrz0rqd0y5zu50hgwqsg0w0xqklg9l4xtej8yajyy47s68nu7fSeen on
wss://relay.momostr.pinkPublished at
2026-05-01 06:23:38 UTCEvent JSON
{
"id": "83231e08a7ee988f29f7b9628c9d7579fee7f46b25bfee18857076d30f3f775b",
"pubkey": "1e0e4314ad20c4f181af2505ca3ee8702087b9e605be82fea65e64727644257d",
"created_at": 1777616618,
"kind": 1,
"tags": [
[
"p",
"1e0e4314ad20c4f181af2505ca3ee8702087b9e605be82fea65e64727644257d"
],
[
"e",
"9a8983fbe20ab9d1c1f957af8f16ba0b12e8ca9de2f1018a89203c8e83bb34c1",
"",
"root",
"1e0e4314ad20c4f181af2505ca3ee8702087b9e605be82fea65e64727644257d"
],
[
"e",
"6561ce90bb4e4fb181b14868ce0b015f605cae152092771b49c4f0b3ef37488e",
"",
"reply",
"1e0e4314ad20c4f181af2505ca3ee8702087b9e605be82fea65e64727644257d"
],
[
"proxy",
"https://mastodon.social/@JulianOliver/116497882681751365",
"web"
],
[
"proxy",
"https://mastodon.social/users/JulianOliver/statuses/116497882681751365",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.social/users/JulianOliver/statuses/116497882681751365",
"pink.momostr"
],
[
"-"
]
],
"content": "Debian's patched 6.12.85+deb13-amd64 #1 SMP PREEMPT_DYNAMIC seems GTG with the PoC published here:\n\nhttps://github.com/theori-io/copy-fail-CVE-2026-31431/blob/main/copy_fail_exp.py\n\n```\nroot@cake:~# su - eat\neat@cake:~$ vim foo.py\neat@cake:~$ cat foo.py | python3 \u0026\u0026 su\nPassword: su: Authentication failure\nPassword:\n```\n\nBit worried about where Ubuntu is at. Ominously, their own fix announcement page seems down:\n\nhttps://ubuntu.com/blog/copy-fail-vulnerability-fixes-available",
"sig": "64772452f7e419d86d4a35f0a2cb05d459a48dcdbdcfb640c5406dc4bfb688e7ec8cdd78244c0fc934b4c4d382d181eae68d24a10955724cdee153ef8be5dafa"
}