Copy Fail: This Exploit Gives Root Access on Linux - SavvyNik

[rog]

4. It looks like developers are already on this ...

From this link, cited in the OP.

Edited to add that (apparently) it hasn't been found in the wild (yet).

Users at particularly high risk of Copy Fail exploitation include "multi-tenant Linux hosts, CI runners & build farms, kubernetes/container clusters, and Cloud SaaS running user code." Common Linux servers are only considered Medium risk, and single-user laptops and workstations are considered Lower risk. Due to the nature of the exploit, though, no Linux user is totally safe, since direct or remote access by a malicious user is all that's needed to execute the miniscule script and gain Root access for further exploitation.

It's fortunate that Xint Code disclosed this exploit and its fix to the development community first. Mainline Linux kernel commit a664bf3d603d already fixes the issue, and devs behind major distributions have either already shipped the fix to their distributions or are in the process of doing so.