{"id":239625,"date":"2026-05-05T12:23:00","date_gmt":"2026-05-05T16:23:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/05\/05\/a-single-732-byte-python-script-can-be-used-to-obtain-root-on-essentially-all-linux-distributions-shipped-since-2017-time-to-update-your-kernel\/"},"modified":"2026-05-05T12:50:09","modified_gmt":"2026-05-05T16:50:09","slug":"a-single-732-byte-python-script-can-be-used-to-obtain-root-on-essentially-all-linux-distributions-shipped-since-2017-time-to-update-your-kernel","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/05\/05\/a-single-732-byte-python-script-can-be-used-to-obtain-root-on-essentially-all-linux-distributions-shipped-since-2017-time-to-update-your-kernel\/","title":{"rendered":"‘A single 732-byte Python script can be used to obtain root on essentially all Linux distributions shipped since 2017’: Time to update your kernel"},"content":{"rendered":"

‘A single 732-byte Python script can be used to obtain root on essentially all Linux distributions shipped since 2017’: Time to update your kernel<\/a><\/p>\n

https:\/\/www.pcgamer.com\/software\/linux\/a-single-732-byte-python-script-can-be-used-to-obtain-root-on-essentially-all-linux-distributions-shipped-since-2017-time-to-update-your-kernel\/<\/a><\/p>\n

Publish Date: 2026-05-05 12:23:00<\/a><\/p>\n

Source Domain: www.pcgamer.com<\/a><\/p>\n

Gaming on Linux has never been better\u2014but that doesn’t mean your distros are free from security threats. Case in point is a severe vulnerability nicknamed ‘Copy Fail,’ which allows a local user to dig into the guts of the OS and give themselves root privileges merely by writing four bytes of controlled data into the page cache of any readable file.<\/p>\n

The security research team at Theori disclosed the vulnerability last Wednesday, though CISA reports that threat actors have since been observed using the exploit in the wild. The security flaw has been given the designation CVE-2026-31431 and marked with a high severity score of 7.8 (via Bleeping Computer).<\/p>\n

This is because Copy Fail could potentially leave a large number of Linux users exposed\u2014if you’ve not updated your kernel in a hot minute, now would be the time. Theori puts it succinctly in its write-up, summarising, “A single 732-byte Python script can [be used to] obtain root on essentially all Linux distributions shipped since 2017.”<\/p>\n

As such, CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog. In accordance with ‘Binding Operational Directive (BOD) 22-01’, this move in turn requires Federal Civilian Executive Branch agencies based throughout the USA to update their systems by May 15 in order to protect their systems against this active threat.<\/p>\n

CISA warns, “This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.”<\/p>\n

\n

(Image credit: Ubuntu)<\/span><\/p>\n

Cybersecurity firm Theori also offers a more digestible Copy Fail guide. This includes the security research team’s original Proof of Concept script so “defenders can verify their own systems and validate vendor patches.” It’s worth clarifying that this script requires local access to a machine running Linux, and that the security vulnerability is not an example of remote code execution.<\/p>\n

The team found the same script works in Ubuntu 24.04 LTS, Amazon Linux 2023, RHEL…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

‘A single 732-byte Python script can be used to obtain root on essentially all Linux…<\/p>\n","protected":false},"author":1,"featured_media":239627,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/cdn.mos.cms.futurecdn.net\/YF9oxZF4B6pytrLsSXL8gQ-2560-80.jpg","fifu_image_alt":"","footnotes":""},"categories":[48],"tags":[90,31,89,71,57,79,27],"class_list":["post-239625","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","tag-cve","tag-exploit","tag-flaw","tag-linux","tag-security","tag-ubuntu","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/239625"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=239625"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/239625\/revisions"}],"predecessor-version":[{"id":239629,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/239625\/revisions\/239629"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/239627"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=239625"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=239625"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=239625"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}