Poor coordination [LWN.net]

Poor coordination

Posted Apr 30, 2026 10:10 UTC (Thu) by anselm (subscriber, #2796)
In reply to: Poor coordination by wodny
Parent article: A security bug in AEAD sockets

It looks as if the current kernel in Debian oldstable (bookworm) is not actually susceptible to the PoC exploit. See https://github.com/theori-io/copy-fail-CVE-2026-31431/issues/19.

to post comments

Poor coordination

Posted Apr 30, 2026 10:16 UTC (Thu) by wodny (subscriber, #73045) [Link] (1 responses)

Yes, I have seen the issue but there is no explanation why it doesn't work. So not sure if a patch entered this version by chance or the splice/payload just needs adjusting.

Poor coordination

Posted May 4, 2026 3:51 UTC (Mon) by ebiggers (subscriber, #130760) [Link]

As far as I can tell, AF_ALG's zero-copy support was accidentally removed from the 6.1 LTS kernel last year, and thus 6.1 wasn't affected by copy.fail. This was unique to 6.1.

The zero-copy support should, of course, just be removed from AF_ALG everywhere.