Copy Fail and kernel update

[izbyMember]

Hi, guys.

There are 3 reasons why I can no longer recommend AntiX to friends (although I still have to): the lack of automatic updating of the installed kernel, the lack of automatic removal of old versions of installed kernels, and the “unclear” grub update (I still don’t know whether it is updated with the system or not). Well, and the localization is so-so, but I’ve already come to terms with that.

So, what about Copy Fail?

Do we already have an updated kernel for this? Which version should I use?

Now I have 5.10.188, 6.1.42 and 6.1.134 (from April, 2025). A year ago you helped me write Обновление ядра для чайников (the link was blocked), but now I’m not sure if I’m doing everything right. Or have we just not had kernel updates all this time?

P.S. BTW, AntiX Forum is blocked in Russia, so I won’t be returning to this discussion any time soon.

[m4r35n357Member]

TLDR: Mitigation (blacklist affected module):

sudo tee /etc/modprobe.d/disable-algif-aead.conf <<< 'install algif_aead /bin/false'

and await kernel update before removing. Details here:

https://coderoasis.com/cve-2026-31431-copy-fail-linux-kernel-privilege-escalation/

Fascinating read.

• This reply was modified 4 months, 3 weeks ago by m4r35n357.
• This reply was modified 4 months, 3 weeks ago by m4r35n357. Reason: clarity
• This reply was modified 4 months, 3 weeks ago by m4r35n357.

[olsztynMember]

izby wrote:

BTW, AntiX Forum is blocked in Russia, so I won’t be returning to this discussion any time soon.

Wait, are you saying antixforum is blocked in Russia? This must be some misunderstanding, I think… My experience was that the EU blocks info, such as RT News (RT.com) and not vice versa. In the EU (not US) it is part of censorship to prevent access to information that is not approved as the official stance of the EU government political perspective…
Whenever I am in the EU for the summer I do need to VPN back to the US to see what is going on on the European front, otherwise such info is blocked there…

• This reply was modified 4 months, 3 weeks ago by olsztyn.
• This reply was modified 4 months, 3 weeks ago by olsztyn.

Live antiX Boot Options (Previously posted by Xecure):
http://antixlinuxfan.miraheze.org/wiki/Table_of_antiX_Boot_Parameters

[Xunzi_23Member]

EU blocks info, such as RT News (RT.com) and not vice versa. In the EU (not US) it is part of censorship
to prevent access to information that is not approved as the official stance of the EU government political
perspective…

BULLSHIT, that is maga propaganda. Blocks are made yes, provably by Russia which fears interference by states
it can not control or manipulate easily. trump is a fscking russian puppet and has dropped sanctions and is
yet again spreading propaganda following Putins Instructions

Apart from that most of Russian citizens are cut off from both the west and the internal internet.
They have been for months.

There are ways around that but the risk of being caught and jailed is very high.

[izbyMember]

Xunzi_23 wrote:

Wait, are you saying antixforum is blocked in Russia?

Most likely, they tried to block something else, but in the end they blocked many uninvolved sites: AntiX Forum, HIBP, Vivaldi, etc. But anyway, миром правят людоеды.

[anticapitalistaForum Admin]

@izby Do you really expect such a small dev team to provide updated kernels in less than 12 hours?
If you do, then it is time for you to say bye bye to antiX.

@everyone else Kernels will be updated as soon as possible.
In the meantime do what is suggested here

m4r35n357 wrote:

TLDR: Mitigation (blacklist affected module):

sudo tee /etc/modprobe.d/disable-algif-aead.conf <<< 'install algif_aead /bin/false'

and await kernel update before removing. Details here:

https://coderoasis.com/cve-2026-31431-copy-fail-linux-kernel-privilege-escalation/

Fascinating read.

Philosophers have interpreted the world in many ways; the point is to change it.

antiX with runit - leaner and meaner.

[izbyMember]

anticapitalista wrote:

Do you really expect such a small dev team to provide updated kernels in less than 12 hours?

Honestly? There aren’t many things I miss about antiX that prevent me from recommending it to those just considering switching to Linux:
• I can’t update the installed kernel using GUI or one simple command.
• I can’t remove old versions of the current kernel using GUI or one simple command.
• TimeShift refuses to work if the disk is divided into several partitions (at least this was the case several years ago), and antiX is the only distro where it could be really useful for me.
• I’m still not sure if grub is updated with the system.
• UI localization is still bad, but now I can’t help with it (the website with translations has also been blocked for a long time).
• Some guys who like antiX for some reasons forked it with minor visual improvements instead of offering this to antiX (for example, Super Lite Linux or LegacyOS). It’s not your fault, but it makes me sad.

And I’m almost certain that repository mirrors will soon be vital for Russian users. I know how to change the antiX mirror, but I’m not sure about Debian.

It’s still the best lightweight distro for older PCs, but it’s not very friendly to newbies.

[anti-apXosMember]

If you want automatic kernel updates on antix, you could switch to using the Debian stable-security kernels with the metapackages Debian provides. The package names for those are just linux-image-amd64 and linux-headers-amd64 or similar, with no version number in the package name. These metapackages will always keep the latest Debian kernel installed. Older kernels can then also be uninstalled using apt autoremove (I think the two most recent kernels are kept not just one).

Debian kernels are built with slightly different options than antix kernels, but they work fine for most cases.

If you just want a GUI for doing updates, there’s synaptic.

I’m not sure exactly what you’re unclear about concerning grub updates. If you mean remaking the grub menu config (/boot/grub/grub.cfg) after a kernel update so that the new kernel is on the list, that is done automatically. If you mean reinstalling the grub bootloader itself after an update of the grub packages, then that is not done automatically, either on antix, debian, or any other distro I know of.

On stable Debian/antix, GRUB package updates are very rare, though. There’s never been one for Bookworm (Debian 12, antix-23), for example.

"--"

[RobinMember]

izby wrote:

P.S. BTW, antiX Forum is blocked in Russia

It is well known that Putin currently blocks the internet, in various regions and across the country. Not an antiX or antiX-forum specific issue. Even from Moscow no full internet access is possible for ordinary people.

P.S.:

anticapitalista wrote:

Kernels will be updated as soon as possible.

Many thanks, anticapitalista!

Windows is like a submarine. Open a window and serious problems will start.

[RobinMember]

anticapitalista wrote:

In the meantime do what is suggested here…

On antiX 26 you can temporarily install a debian kernel. Their Trixie kernel 6.12.85-1 is already updated from the security repo and is installable on all non-32-bit systems. (No fixed kernels for bookworm still) UPDATE: See anticapitalista’s posting below → Fixed antiX kernels available for 64 bit already. Boy, that was really fast. Many many thanks !

Users are strongly encouraged to update kernels as soon as available. Even when this looks like a funny local thing at first glance, not relevant to single user machines at home, this is a way more stern issue. The actual danger here lies in an escalation chain where malware gains access to a user account and from there spreads across the system via local privilege escalation.

• This reply was modified 4 months, 3 weeks ago by Robin. Reason: fixed antiX kernels avilable already

Windows is like a submarine. Open a window and serious problems will start.

[anticapitalistaForum Admin]

Robin wrote:

On antiX 26 you can temporarily install a debian kernel. Their Trixie kernel 6.12.85-1 is already updated from the security repo and is installable on all non-32-bit systems. (No fixed kernels for bookworm still)

There is now for antiX (64bit)!

https://repo.antixlinux.com/uploads/bookworm/main/

Philosophers have interpreted the world in many ways; the point is to change it.

antiX with runit - leaner and meaner.

[RobinMember]

izby wrote:

Well, and the localization is so-so

You and your friends are highly welcome at transifex to improve and fill in all the missing entries. Sorry, I’m not a native Russian language speaker, so my translations to your language are not as good as it would be preferable.

izby wrote:

UI localization is still bad, but now I can’t help with it (the website with translations has also been blocked for a long time).

Is this actually about transifex? Why is it blocked for you? Who blocks it and how?

Windows is like a submarine. Open a window and serious problems will start.

[stevesr0Member]

Hi anticapitalista,

I have applied the mitigation, pending my install of a fixed kernel. Thanks to m4r35n357 for posting that.

I assume that the 6.1.137 linux-image in the link you provided is one of the “fixed” kernels. I also assume that it will also work for my Sid install as well as my “regular” antiX-23 install?

[mjbMember]

I’m on 23.2 bookworm and I’ve updated the kernel without any issues.

Thanks for the speedy response to this matter. Cheerio.

mjb

• This reply was modified 4 months, 3 weeks ago by mjb.

[izbyMember]

Robin wrote:

I think the two most recent kernels are kept not just one

OK, thanks. This explains why the old version has not disappeared. I don’t worry about updates until news of another vulnerability appears. The last ones were a kernel vulnerability last April and some vulnerability in grub. I haven’t seen this mentioned during system updates. That’s why I feel the OS isn’t as user-friendly as it should be.

Robin wrote:

Is this actually about transifex? Why is it blocked for you? Who blocks it and how?

It’s been blocked for several months now. They probably wanted to block Telegram, WhatsApp, and VPNs, but they ended up blocking random websites.

[Author]

Posts