Linux 7.2 removes strncpy function after six years

Linux 7.2 has completed the removal of the strncpy function from the kernel. The change ended a long-running cleanup effort involving more than 360 patches.

The merge window for Linux 7.2 closed on Friday with the final removal of strncpy from every subsystem. Kernel developers had worked on the project for six years.

The function is described in the kernel's own documentation as actively dangerous. Its elimination marks the end of a campaign that many had stopped expecting to finish.

The update affects all remaining uses of the C string-copy routine across drivers and other components.

Related Articles

Illustration depicting the Linux CopyFail vulnerability enabling root access exploits alongside Ubuntu's DDoS-induced outage.
Image generated by AI

Linux CopyFail exploit threatens root access amid Ubuntu outage

Reported by AI Image generated by AI

A critical Linux vulnerability known as CopyFail, tracked as CVE-2026-31431, allows attackers to gain root access on systems running kernels since 2017. Publicly released exploit code has heightened risks for data centers and personal devices. Ubuntu's infrastructure has been offline for over a day due to a DDoS attack, hampering security communications.

NVIDIA engineer Sasha Levin has proposed a new mechanism for the Linux kernel that would let administrators quickly disable flawed functions on live systems. The patch, called killswitch, aims to mitigate privilege escalation risks without waiting for full fixes. It remains under review on the Linux Kernel Mailing List.

Reported by AI

Four days after the CopyFail (CVE-2026-31431) exploit disclosure disrupted Ubuntu services, the US government warned of its critical risks to Linux systems, urging immediate patching amid public exploit code.

This website uses cookies

We use cookies for analytics to improve our site. Read our privacy policy for more information.
Decline