Post B5ozYLFGKfNkFVLNkO by mntmn@mastodon.social
(DIR) More posts by mntmn@mastodon.social
(DIR) Post #B5ozYLFGKfNkFVLNkO by mntmn@mastodon.social
0 likes, 0 repeats
funny, the copy fail exploit demo doesn't work out of the box on my MNT Pocket Reform because it shadows /usr/bin/su with an x86 executable, and i don't currently have an x86 emulator installed system-wide
(DIR) Post #B5ozfuVRdBzvdVWQaG by mntmn@mastodon.social
1 likes, 0 repeats
so to exploit arm64 i guess they would need to add an architecture check first...
(DIR) Post #B5oztVo2GKlT5Hhg6C by mntmn@mastodon.social
0 likes, 0 repeats
the exploit demo doesn't work for me with box64, still can't cat /etc/shadow afterwards ;/
(DIR) Post #B5p0Bjmh1v7JeLlYtE by mntmn@mastodon.social
1 likes, 0 repeats
the exploit itself does seem to work though on my older kernel build, after running "echo 3 | sudo tee /proc/sys/vm/drop_caches" the architecture of /usr/bin/su reverts to aarch64
(DIR) Post #B5p3IAFvp16PLlCMlM by badrihippo@fosstodon.org
0 likes, 0 repeats
@mntmn lol! MNT rocks 😉 🪨
(DIR) Post #B5pB6gJTbjBEvptMsy by rafaelmartins@mastodon.social
0 likes, 0 repeats
@mntmn fwiw, the patch in trixie-backports, that apparently is the same as in testing, solves nothing. disabling the module was the only solution that worked for me
(DIR) Post #B5pBp9XIJpOWJ4Ypgu by lampsofgold@veoh.social
0 likes, 0 repeats
@mntmn looks like there’s an aarch64 port https://github.com/theori-io/copy-fail-CVE-2026-31431/pull/25