# CopyFail Mitigation write up by Dragos Ruiu of CanSecWest

**URL:** <https://discourse.mailinabox.email/t/copyfail-mitigation-write-up-by-dragos-ruiu-of-cansecwest/16402>\
**Category:** Maintenance\
**Created:** [May 1, 2026, 8:28pm UTC](https://discourse.mailinabox.email/t/copyfail-mitigation-write-up-by-dragos-ruiu-of-cansecwest/16402 "2026-05-01T20:28:34Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![cowboy](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/c/c68b51/32.png) [@cowboy](https://discourse.mailinabox.email/u/cowboy)\
**Post date:** [May 1, 2026, 8:28pm UTC](https://discourse.mailinabox.email/t/copyfail-mitigation-write-up-by-dragos-ruiu-of-cansecwest/16402/1 "2026-05-01T20:28:34Z")

</div>

For those who want to take additional investigations or steps into your respective systems regarding Copy Fail … this might be a good read from security research and founder of CanSecWest and PacSec, Dragos Ruiu.

> **[How to block CVE-2026-31431 (Copy Fail) - secwest.net - secure virtual...](https://www.secwest.net/copyfail-mitigation)**
>
> How to block CVE-2026-31431 (Copy Fail) — the Linux kernel algif\_aead local privilege escalation that poisons setuid binaries via the shared page cache. Fleet-scale module disable, RHEL built-in workarounds, Docker/Kubernetes seccomp profiles to...

---

<div class="post-metadata">

**Author:** ![fracai](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/fracai/32/936_2.png) [@fracai](https://discourse.mailinabox.email/u/fracai)\
**Post date:** [May 2, 2026, 3:43am UTC](https://discourse.mailinabox.email/t/copyfail-mitigation-write-up-by-dragos-ruiu-of-cansecwest/16402/2 "2026-05-02T03:43:29Z")

</div>

For what it’s worth, today after updating to MiaB v75 and running `sudo apt update && sudo apt upgrade`, I ran the Ubuntu-suggested check and my system came back clean.

```auto
# grep -qE '^algif_aead ' /proc/modules && echo "Affected module is loaded" || echo "Affected module is NOT loaded"
Affected module is NOT loaded

```

care of: [Fixes available for CVE-2026-31431 (Copy Fail) Linux Kernel Local Privilege Escalation Vulnerability | Ubuntu](https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available)

---

<div class="post-metadata">

**Author:** ![system](https://discourse.mailinabox.email/uploads/default/original/2X/4/4d0933d13c456b7e57f296aa6cc344525b6f0c70.png) [@system](https://discourse.mailinabox.email/u/system)\
**Post date:** [June 11, 2026, 3:44am UTC](https://discourse.mailinabox.email/t/copyfail-mitigation-write-up-by-dragos-ruiu-of-cansecwest/16402/3 "2026-06-11T03:44:06Z")

</div>

This topic was automatically closed 40 days after the last reply. New replies are no longer allowed.