CopyFail (CVE-2026-31431) is a high-severity Linux kernel vulnerability -- patches are out now for Rocky Linux 8.10, 9.8, and 10.1.
Any unprivileged local user can escalate to root in seconds. Multi-tenant hosts, containers, and CI runners should prioritize this one.
Fix it with:
sudo dnf --refresh update 'kernel*'
Full write-up on the blog:
https://forums.rockylinux.org/t/copyfail-cve-2026-31431-patches-now-available-for-rocky-linux/20422
#RockyLinux #Linux #OpenSource #LinuxSecurity #CopyFail
Rocky Linux :rockylinux:
npub1kg…vw7kf
2026-05-07 17:35:02 UTC
Author Public Key
npub1kg2v55zndpp3ullwdr268qz8ehzvq2rpjyf69a98ac2n93gkzp8sdvw7kfSeen on
wss://relay.ditto.pubPublished at
2026-05-07 17:35:02 UTCEvent JSON
{
"id": "47e73261b8afbacca4adfc072f641d56deebb1f71d3a345fb9df7e149ead6baa",
"pubkey": "b214ca505368431e7fee68d5a38047cdc4c028619113a2f4a7ee1532c516104f",
"created_at": 1778175302,
"kind": 1,
"tags": [
[
"t",
"RockyLinux"
],
[
"t",
"linux"
],
[
"t",
"opensource"
],
[
"t",
"linuxsecurity"
],
[
"t",
"copyfail"
],
[
"proxy",
"https://fosstodon.org/users/rockylinux/statuses/116534496633342156",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "CopyFail (CVE-2026-31431) is a high-severity Linux kernel vulnerability -- patches are out now for Rocky Linux 8.10, 9.8, and 10.1.\n\nAny unprivileged local user can escalate to root in seconds. Multi-tenant hosts, containers, and CI runners should prioritize this one.\n\nFix it with:\nsudo dnf --refresh update 'kernel*'\n\nFull write-up on the blog:\nhttps://forums.rockylinux.org/t/copyfail-cve-2026-31431-patches-now-available-for-rocky-linux/20422 \n#RockyLinux #Linux #OpenSource #LinuxSecurity #CopyFail",
"sig": "2b566a72ba23758d2794c64558e6e26011a58a91bd62d2c9380dc378e4fd3d0d1765ecfb53bbec12885a67bcba26bfc2891d6eb3e278bbc0a5b5877d0687f7fa"
}