Re:CopyFail was not disclosed to Gentoo developer
by tptacek on Thursday April 30, 2026 @03:20PM
(#47967051)
Without taking a position on the disclosure mechanics: any hosting provider hacked with this was already playing to lose. It is not OK to run competing untrusted tenant workloads under a single shared kernel. Kernel LPEs are not rare. This was a particularly simple and portable one, but the underlying raw capability is a CNE commodity.
[ Parent
| on HN ]
Re:CopyFail was not disclosed to Gentoo developer
by jcalvinowens on Thursday April 30, 2026 @04:25PM
(#47967761)
> Kernel LPEs are not rare. This was a particularly simple and portable one, but the underlying raw capability is a CNE commodity.
I absolutely 100% agree with this and I'm glad to see somebody saying it. Any system that is one LPE away from being compromised is already insecure.