Re: Curious about Copy Fail Linux bug and any relation to FreeBSD

On Fri, May 1, 2026 at 6:21 PM Ralf Mardorf <[email protected]> wrote:
>
> On Fri, 2026-05-01 at 14:28 -0400, Paul Procacci wrote:
> > The above isn't to say that one day a bug like this can't make it into
> > FBSD by implementing looser controls but as it stands now, this
> > specific type of 'splice into pipe' attack simply does not exist.
>
> Hi,
>
> I haven't looked into that Linux vulnerability, what you're saying might
> be true, but it's still completely irrelevant. Some nutcases are
> currently sending the computer infrastructure back to the Stone Age.
>
> Computer hardware is becoming increasingly powerful, and off-the-shelf
> software, whether AI-based or not, now makes it possible for just about
> anyone to attack other systems. No matter the operating system or
> hardware, anything connected to the internet that’s of any significant
> size, not necessarily just the average home user’s desktop PC, is
> successfully attacked. Despite all their weaknesses, my desktop
> computers have never been successfully attacked directly, but not a day
> goes by without some online service I want to use going down and often
> causing problems for weeks on end, even if it’s just due to a DDoS
> attack.
>
> No matter how well-hardened a private system is, whatever you need from
> the world outside your own household is constantly being slowed down by
> some kind of attack.
>
> Btw. Recently:
> https://forums.freebsd.org/threads/forum-outage.102193/#post-752543
>
> Today:
>       "-------- Forwarded Message --------
>       From: [...]
>       To: "Ubuntu user technical support, not for general discussions"
>       Subject: Re: kernel security patch
>       Date: 05/01/2026 10:22:29 AM
>
>       Canonical Ubuntu Infra is being ddosed by hacktivist atm:
>       https://status.canonical.com/#/incident/KNms6QK9ewuzz-7xUsPsNylV20jEt5kyKsd8A-3ptQEHpOd8VQ40ZQs-KD81fboQXeGZB94okNHdHBGlCv58Sw==
>
>       Den fre 1 maj 2026 kl 10:17 skrev Ralf Mardorf via ubuntu-users
>       <[email protected]>:
>
>       You are probably afraid of the high vulnerability "Copy Fail"
>       (CVE-2026-31431).
>
>       I can connect to https://tracker.debian.org/pkg/linux, but my browser
>       won't open links on ubuntu.com. When it comes to Ubuntu Linux package
>       updates that include security measures, that seems to be the crux of the
>       matter."
>
> https://lists.ubuntu.com/archives/ubuntu-users/2026-May/date.html , most
> likely unavailable right now because it's under attack.
>
> The CVE-2026-31431 vulnerability has long since been mitigated by the
> major Linux distributions. However, they continue to grapple with
> entirely different issues, just like FreeBSD, Windows, or anyone else.
>
> Regards,
> Ralf
>

Quite frankly,

I don't know what you're going on about.
None of what you wrote addresses the question by the OP.
We're talking about copy-fail and the surrounding splice into pipe
attack vectors of which nothing you wrote supports this topic.

~Paul

-- 
__________________

:(){ :|:& };: