Andrea Veri's Blog personal blog

CVE-2026-31431: Copy Fail vs. rootless containers

In the previous post about SELinux MCS and GitLab runners, I briefly mentioned CVE-2026-31431 (“Copy Fail”) as a motivating example for per-job VM isolation. After that post went out I spent the weekend setting up a lab to actually run the exploit, trace it at the syscall level, and verify that the rootless Podman…
Points
205
HN comments
123
Submissions
1
Cited by
0 commenters

Security & PrivacyInfrastructure & DevOps2026

On Hacker News

SubmittedTitle on HNPointsComments
May 5, 2026CVE-2026-31431: Copy Fail vs. rootless containers by averi205123

Related posts from the same era