Post B5pBp9XIJpOWJ4Ypgu by lampsofgold@veoh.social
 (DIR) More posts by lampsofgold@veoh.social
 (DIR) Post #B5ozYLFGKfNkFVLNkO by mntmn@mastodon.social
       0 likes, 0 repeats
       
       funny, the copy fail exploit demo doesn't work out of the box on my MNT Pocket Reform because it shadows /usr/bin/su with an x86 executable, and i don't currently have an x86 emulator installed system-wide
       
 (DIR) Post #B5ozfuVRdBzvdVWQaG by mntmn@mastodon.social
       1 likes, 0 repeats
       
       so to exploit arm64 i guess they would need to add an architecture check first...
       
 (DIR) Post #B5oztVo2GKlT5Hhg6C by mntmn@mastodon.social
       0 likes, 0 repeats
       
       the exploit demo doesn't work for me with box64, still can't cat /etc/shadow afterwards ;/
       
 (DIR) Post #B5p0Bjmh1v7JeLlYtE by mntmn@mastodon.social
       1 likes, 0 repeats
       
       the exploit itself does seem to work though on my older kernel build, after running "echo 3 | sudo tee /proc/sys/vm/drop_caches" the architecture of /usr/bin/su reverts to aarch64
       
 (DIR) Post #B5p3IAFvp16PLlCMlM by badrihippo@fosstodon.org
       0 likes, 0 repeats
       
       @mntmn lol! MNT rocks 😉 🪨
       
 (DIR) Post #B5pB6gJTbjBEvptMsy by rafaelmartins@mastodon.social
       0 likes, 0 repeats
       
       @mntmn fwiw, the patch in trixie-backports, that apparently is the same as in testing, solves nothing. disabling the module was the only solution that worked for me
       
 (DIR) Post #B5pBp9XIJpOWJ4Ypgu by lampsofgold@veoh.social
       0 likes, 0 repeats
       
       @mntmn looks like there’s an aarch64 port  https://github.com/theori-io/copy-fail-CVE-2026-31431/pull/25