Re: Curious about Copy Fail Linux bug and any relation to FreeBSD

On Fri, 2026-05-01 at 14:28 -0400, Paul Procacci wrote:
> The above isn't to say that one day a bug like this can't make it into
> FBSD by implementing looser controls but as it stands now, this
> specific type of 'splice into pipe' attack simply does not exist.

Hi,

I haven't looked into that Linux vulnerability, what you're saying might
be true, but it's still completely irrelevant. Some nutcases are
currently sending the computer infrastructure back to the Stone Age.

Computer hardware is becoming increasingly powerful, and off-the-shelf
software, whether AI-based or not, now makes it possible for just about
anyone to attack other systems. No matter the operating system or
hardware, anything connected to the internet that’s of any significant
size, not necessarily just the average home user’s desktop PC, is
successfully attacked. Despite all their weaknesses, my desktop
computers have never been successfully attacked directly, but not a day
goes by without some online service I want to use going down and often
causing problems for weeks on end, even if it’s just due to a DDoS
attack.

No matter how well-hardened a private system is, whatever you need from
the world outside your own household is constantly being slowed down by
some kind of attack.

Btw. Recently:
https://forums.freebsd.org/threads/forum-outage.102193/#post-752543

Today:
      "-------- Forwarded Message --------
      From: [...]
      To: "Ubuntu user technical support, not for general discussions" 
      Subject: Re: kernel security patch
      Date: 05/01/2026 10:22:29 AM
      
      Canonical Ubuntu Infra is being ddosed by hacktivist atm:
      https://status.canonical.com/#/incident/KNms6QK9ewuzz-7xUsPsNylV20jEt5kyKsd8A-3ptQEHpOd8VQ40ZQs-KD81fboQXeGZB94okNHdHBGlCv58Sw==
      
      Den fre 1 maj 2026 kl 10:17 skrev Ralf Mardorf via ubuntu-users
      <[email protected]>:
      
      You are probably afraid of the high vulnerability "Copy Fail"
      (CVE-2026-31431).
      
      I can connect to https://tracker.debian.org/pkg/linux, but my browser
      won't open links on ubuntu.com. When it comes to Ubuntu Linux package
      updates that include security measures, that seems to be the crux of the
      matter."
      
https://lists.ubuntu.com/archives/ubuntu-users/2026-May/date.html , most
likely unavailable right now because it's under attack.

The CVE-2026-31431 vulnerability has long since been mitigated by the
major Linux distributions. However, they continue to grapple with
entirely different issues, just like FreeBSD, Windows, or anyone else.

Regards,
Ralf