Notice: Linux Copy Fail vulnerability - security updates completed

A new local root privilege escalation vulnerability has been found in Linux systems, known as “Copy Fail” (CVE-2026-31431). The vulnerability affects all Linux servers installed after 2017 that have local user accounts or run user-level code.

We have completed the necessary security updates on all our servers immediately after receiving information about the vulnerability from our server infrastructure partner. As part of the security updates, we also checked the status of our servers and found no indication that the vulnerability had been exploited on our servers.

In addition, we will continue updating the Linux software and kernels we use as Linux distribution maintainers release further security fixes.

More information about the vulnerability is available at https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-10

30 April 2026